# /etc/strongswan.conf - strongSwan configuration file

charon {
  load = random nonce aes sha1 sha2 md5 pem pkcs1 gmp hmac x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown

  start-scripts {
    creds = /usr/local/sbin/swanctl --load-creds 
    conns = /usr/local/sbin/swanctl --load-conns
  }
  syslog {
    auth {
      default = 0
    }
    daemon {
      tnc = 2 
      imc = 3
    }
  }
  plugins {
    eap-ttls {
      max_message_count = 0
    }
    eap-tnc {
      max_message_count = 0
    }
    tnccs-20 {
      max_batch_size = 1600
      max_message_size = 1568
    }
  }
}

libtls {
  suites = TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
}

libimcv {
  os_info {
    name = strongPrint OS
    version = 1.1
    default_password_enabled = no
  }

  plugins {
    imc-hcd {
      push_info = no
      subtypes {
        system {
          attributes_natural_language = en
          machine_type_model = strongPrint Laser X.509a
          vendor_name = ITA-HSR
          vendor_smi_code = 36906
          pstn_fax_enabled = yes
          time_source = 0.ch.pool.ntp.org
          user_application_enabled = no 
          user_application_persistence_enabled = no

          firmware {
            fw-1 {
              name = Firmware ABC 
              patches = "security patch 2014-05-08\r\nupgrade 2014-08-16\r\nsecurity patch 2015-3-22\r\n"
              string_version = 1.0.7
              version = 00000001000000000000000700000000
            }
            fw-2 {
              name = Firmware UVW 
              string_version = 13.8.5
              version = 0000000D000000080000000500000000
            }
          }

          resident_application {
            resident-app-1 {
              name = Resident App XYZ 
              patches = "xmas patch 2014-12-24\r\nservice patch 2015-05-22\r\n"
              string_version = 2.5
              version = 00000002000000050000000000000000
            }
          }

          certification_state = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
          configuration_state = f0f1f2f3f4f5f6f7f8f9fafbfcfdfeffe0e1e2e3e4e5e6e7e8e9eaebecedeeefd0d1d2d3d4d5d6d7d8d9dadbdcdddedf
        }

        console {
          attributes_natural_language = ru
        }

        marker {
          attributes_natural_language = fr
        }

        finisher {
          attributes_natural_language = de
        }

        interface {
          attributes_natural_language = en
 
          firmware {
            fw-if {
              name = Interface Firmware
              patches =
              string_version = 7.8
              version = 00000007000000080000000000000000
            }
          }

          resident_application {
		    resident-app-if {
              name = Resident Interface App
              patches = "service patch 2015-02-09\r\n"
              string_version = 2.5
              version = 00000002000000050000000000000000
            }
          }
        }

        scanner {
          attributes_natural_language = en
 
          firmware {
            fw-scanner {
              name = Scanner Firmware 
              patches = "security patch 2013-08-11\r\nsecurity patch 2015-5-30\r\n"
              string_version = 2.5.3
              version = 00000002000000050000000300000000
            }
          }
        }
      }
    }
  }
}