# /etc/strongswan.conf - strongSwan configuration file charon { load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac stroke kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-imv tnc-tnccs tnccs-20 updown multiple_authentication = no plugins { eap-ttls { phase2_method = md5 phase2_piggyback = yes phase2_tnc = yes } } }