# /etc/strongswan.conf - strongSwan configuration file charon { load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default fips-prf eap-aka eap-aka-3gpp2 updown integrity_test = yes }