# /etc/strongswan.conf - strongSwan configuration file swanctl { load = pkcs1 pem openssl } charon-systemd { load = random nonce openssl pem pkcs1 revocation constraints curl kernel-netlink socket-default updown vici rsa_pss = yes }