Annotation of embedaddon/strongswan/testing/tests/tnc/tnccs-20-os-pts/hosts/moon/etc/strongswan.conf, revision 1.1.1.1
1.1 misho 1: # /etc/strongswan.conf - strongSwan configuration file
2:
3: charon-systemd {
4: load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-imv tnc-tnccs tnccs-20 updown sqlite
5:
6: multiple_authentication = no
7:
8: syslog {
9: daemon {
10: tnc = 2
11: imv = 3
12: pts = 3
13: }
14: }
15: plugins {
16: eap-ttls {
17: phase2_method = md5
18: phase2_piggyback = yes
19: phase2_tnc = yes
20: }
21: }
22: }
23:
24: libtls {
25: suites = TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
26: }
27:
28: libimcv {
29: database = sqlite:///etc/db.d/config.db
30: policy_script = /usr/local/libexec/ipsec/imv_policy_manager
31: plugins {
32: imv-attestation {
33: hash_algorithm = sha256
34: }
35: }
36: }
37:
38: attest {
39: load = random nonce openssl sqlite
40: database = sqlite:///etc/db.d/config.db
41: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>