# /etc/strongswan.conf - strongSwan configuration file swanctl { load = pem pkcs1 pubkey openssl random } charon-systemd { load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-tls updown multiple_authentication=no syslog { daemon { tls = 2 } } plugins { eap-tls { max_message_count = 40 } } }