eap {
  default_eap_type = tls
  tls {
    certdir = /etc/raddb/certs
    cadir = /etc/raddb/certs
    private_key_file = /etc/raddb/certs/aaaKey.pem
    certificate_file = /etc/raddb/certs/aaaCert.pem
    CA_file = /etc/raddb/certs/strongswanCert.pem
    cipher_list = "DEFAULT"
    dh_file = /etc/raddb/certs/dh
    random_file = /etc/raddb/certs/random
  }
}