# /etc/strongswan.conf - strongSwan configuration file

libimcv {
  plugins {
    imc-os {
      push_info = yes 
    }
    imc-swid {
      #swid_directory = /usr/share
    }
  }
}

libtnccs {
  plugins {
    tnccs-20 {
      max_batch_size   = 131056
      max_message_size = 131024
    }
  }
}

libtls {
  suites = TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}

pt-tls-client {
  load = curl revocation constraints pem openssl nonce tnc-tnccs tnc-imc tnccs-20
}