# /etc/strongswan.conf - strongSwan configuration file swanctl { load = pkcs1 pem openssl x509 revocation constraints } charon-systemd { load = random nonce sha1 sha2 sha3 aes curve25519 hmac kdf mgf1 pem pkcs1 x509 revocation constraints gmp curl kernel-netlink socket-default updown vici rsa_pss = yes }