# /etc/strongswan.conf - strongSwan configuration file swanctl { load = pem pkcs1 pubkey openssl random } charon-systemd { load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default sqlite attr-sql vici plugins { attr-sql { database = sqlite:///etc/db.d/ipsec.db } } } pool { load = sqlite database = sqlite:///etc/db.d/ipsec.db }