testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/dave/etc/strongswan.conf


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

# /etc/strongswan.conf - strongSwan configuration file

swanctl {
  load = pem pkcs1 x509 revocation constraints pubkey openssl random 
}

charon {
  load = random nonce md5 sha1 sha2 sha3 aes hmac pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl eap-tls kernel-netlink socket-default updown vici 

  start-scripts {
    creds = /usr/local/sbin/swanctl --load-creds 
    conns = /usr/local/sbin/swanctl --load-conns
  } 
}

libtls {
  suites = TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
}