# /etc/strongswan.conf - strongSwan configuration file

charon {
  load = test-vectors pem pkcs1 pkcs8 random nonce x509 revocation openssl soup stroke kernel-netlink socket-default

  integrity_test = yes

  crypto_test {
    required = yes
    on_add = yes
  }

  plugins {
    openssl {
      fips_mode = 2
    }
  }
}
