Also move initialization to the pretest script (it's way faster in the in-memory database).
26 lines
548 B
Plaintext
26 lines
548 B
Plaintext
# /etc/strongswan.conf - strongSwan configuration file
|
|
|
|
libtls {
|
|
suites = TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
|
|
}
|
|
|
|
libimcv {
|
|
plugins {
|
|
imc-swima {
|
|
swid_database = sqlite:///etc/db.d/collector.db
|
|
}
|
|
}
|
|
}
|
|
|
|
pt-tls-client {
|
|
load = revocation constraints pem openssl curl sqlite nonce tnc-tnccs tnc-imc tnccs-20
|
|
}
|
|
|
|
sw-collector {
|
|
database = sqlite:///etc/db.d/collector.db
|
|
history = /var/log/apt/history.log
|
|
rest_api {
|
|
uri = http://admin-user:[email protected]/api/
|
|
}
|
|
}
|