# /etc/strongswan.conf - strongSwan configuration file charon { load = random nonce pem pkcs1 openssl revocation curl vici kernel-netlink socket-default updown multiple_authentication = no } libstrongswan { x509 { enforce_critical = no } }