# /etc/strongswan.conf - strongSwan configuration file

charon-tkm {
  ke_mapping {
    15 = 1
    16 = 2
  }
  proposal_mapping {
    ike {
      1 = aes256-sha512-prfsha512
    }
    esp {
      1 = aes256-sha512-esn-noesn
    }
  }
  ca_mapping {
    strongswan_ca {
      id = 1
      fingerprint = CA_SPK_HEX
    }
  }
  start-scripts {
    swanctl = /usr/local/sbin/swanctl --load-all --noprompt
  }
}