# /etc/strongswan.conf - strongSwan configuration file

libimcv {
  plugins {
    imc-os {
      push_info = no
    }
    imc-swima {
      swid_pretty = yes
    }
  }
}

libtls {
  suites = TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384
  ke_group = curve25519, curve448
  version_max = 1.3
}

pt-tls-client {
  load = revocation constraints pem openssl curl nonce openssl tnc-tnccs tnc-imc tnccs-20
}
