# /etc/strongswan.conf - strongSwan configuration file

charon-tkm {
  # remove rekeyed inbound SA a bit quicker for the test scenario
  delete_rekeyed_delay = 2
  dh_mapping {
    15 = 1
    16 = 2
  }
  ca_mapping {
    strongswan_ca {
      id = 1
      fingerprint = CA_SPK_HEX
    }
  }
  start-scripts {
    swanctl = /usr/local/sbin/swanctl --load-all --noprompt
  }
}