Martin Willi
44b6a34d43
Some fetcher plugins (such as curl) might build upon OpenSSL to implement HTTPS fetching. As we set (and can't unset) threading callbacks in our openssl plugin, we must ensure that OpenSSL functions don't get called after openssl plugin unloading. We achieve that by loading curl and all other fetcher plugins after the base crypto plugins, including openssl.
22 lines
398 B
Plaintext
22 lines
398 B
Plaintext
# /etc/strongswan.conf - strongSwan configuration file
|
|
|
|
charon {
|
|
load = openssl curl pem pkcs1 random nonce revocation stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-11 updown
|
|
|
|
multiple_authentication=no
|
|
|
|
plugins {
|
|
eap-tnc {
|
|
protocol = tnccs-1.1
|
|
}
|
|
}
|
|
}
|
|
|
|
libimcv {
|
|
plugins {
|
|
imc-test {
|
|
command = allow
|
|
}
|
|
}
|
|
}
|