# /etc/strongswan.conf - strongSwan configuration file

libtls {
  suites = TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}

libimcv {
  swid_gen {
    tag_creator {
      name = Debian Project
      regid = debian.org
    }
  }
}

pt-tls-client {
  load = revocation constraints pem openssl curl nonce tnc-tnccs tnc-imc tnccs-20
}