# /etc/strongswan.conf - strongSwan configuration file pt-tls-client { load = random nonce x509 openssl pem pkcs1 revocation curl tnc-tnccs tnc-imc tnc-imv tnccs-20 } libtls { suites = TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 } libimcv { plugins { imc-test { command = allow } imv-test { rounds = 1 } } }