# /etc/strongswan.conf - strongSwan configuration file charon-tkm { dh_mapping { 15 = 1 16 = 2 } ca_mapping { strongswan_ca { id = 1 fingerprint = CA_SPK_HEX } } start-scripts { swanctl = /usr/local/sbin/swanctl --load-all --noprompt } }