testing/tests/openssl-ikev2/rw-suite-b-128/hosts/dave/etc/strongswan.conf


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

# /etc/strongswan.conf - strongSwan configuration file

charon {
  load = test-vectors soup pem pkcs1 pkcs8 random nonce x509 revocation openssl stroke kernel-netlink socket-default

  retransmit_timeout = 2
  retransmit_base = 1.5
  retransmit_tries = 3 
  initiator_only = yes
  integrity_test = yes

  crypto_test {
    required = yes
    on_add = yes
  }

  plugins {
    openssl {
      fips_mode = 2
    }
  }
}