Tobias Brunner
be214cb17e
We could make the same change for charon (actually setting it for charon in strongswan.conf.testing would work for charon-systemd too), however, there are dozens of test cases that currently set charondebug in ipsec.conf.
128 lines
3.2 KiB
Plaintext
128 lines
3.2 KiB
Plaintext
# /etc/strongswan.conf - strongSwan configuration file
|
|
|
|
charon-systemd {
|
|
load = random nonce aes sha1 sha2 md5 pem pkcs1 gmp hmac x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown
|
|
|
|
syslog {
|
|
daemon {
|
|
tnc = 2
|
|
imc = 3
|
|
}
|
|
}
|
|
plugins {
|
|
eap-ttls {
|
|
max_message_count = 0
|
|
}
|
|
eap-tnc {
|
|
max_message_count = 0
|
|
}
|
|
tnccs-20 {
|
|
max_batch_size = 1600
|
|
max_message_size = 1568
|
|
}
|
|
}
|
|
}
|
|
|
|
libtls {
|
|
suites = TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
|
|
}
|
|
|
|
libimcv {
|
|
os_info {
|
|
name = strongPrint OS
|
|
version = 1.1
|
|
default_password_enabled = no
|
|
}
|
|
|
|
plugins {
|
|
imc-hcd {
|
|
push_info = no
|
|
subtypes {
|
|
system {
|
|
attributes_natural_language = en
|
|
machine_type_model = strongPrint Laser X.509a
|
|
vendor_name = ITA-HSR
|
|
vendor_smi_code = 36906
|
|
pstn_fax_enabled = yes
|
|
time_source = 0.ch.pool.ntp.org
|
|
user_application_enabled = no
|
|
user_application_persistence_enabled = no
|
|
|
|
firmware {
|
|
fw-1 {
|
|
name = Firmware ABC
|
|
patches = "security patch 2014-05-08\r\nupgrade 2014-08-16\r\nsecurity patch 2015-3-22\r\n"
|
|
string_version = 1.0.7
|
|
version = 00000001000000000000000700000000
|
|
}
|
|
fw-2 {
|
|
name = Firmware UVW
|
|
string_version = 13.8.5
|
|
version = 0000000D000000080000000500000000
|
|
}
|
|
}
|
|
|
|
resident_application {
|
|
resident-app-1 {
|
|
name = Resident App XYZ
|
|
patches = "xmas patch 2014-12-24\r\nservice patch 2015-05-22\r\n"
|
|
string_version = 2.5
|
|
version = 00000002000000050000000000000000
|
|
}
|
|
}
|
|
|
|
certification_state = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
|
|
configuration_state = f0f1f2f3f4f5f6f7f8f9fafbfcfdfeffe0e1e2e3e4e5e6e7e8e9eaebecedeeefd0d1d2d3d4d5d6d7d8d9dadbdcdddedf
|
|
}
|
|
|
|
console {
|
|
attributes_natural_language = ru
|
|
}
|
|
|
|
marker {
|
|
attributes_natural_language = fr
|
|
}
|
|
|
|
finisher {
|
|
attributes_natural_language = de
|
|
}
|
|
|
|
interface {
|
|
attributes_natural_language = en
|
|
|
|
firmware {
|
|
fw-if {
|
|
name = Interface Firmware
|
|
patches =
|
|
string_version = 7.8
|
|
version = 00000007000000080000000000000000
|
|
}
|
|
}
|
|
|
|
resident_application {
|
|
resident-app-if {
|
|
name = Resident Interface App
|
|
patches = "service patch 2015-02-09\r\n"
|
|
string_version = 2.5
|
|
version = 00000002000000050000000000000000
|
|
}
|
|
}
|
|
}
|
|
|
|
scanner {
|
|
attributes_natural_language = en
|
|
|
|
firmware {
|
|
fw-scanner {
|
|
name = Scanner Firmware
|
|
patches = "security patch 2013-08-11\r\nsecurity patch 2015-5-30\r\n"
|
|
string_version = 2.5.3
|
|
version = 00000002000000050000000300000000
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|