# /etc/strongswan.conf - strongSwan configuration file pluto { load = test-vectors aes des sha1 sha2 md5 pem pkcs1 x509 gmp random hmac curl } # pluto uses optimized DH exponent sizes (RFC 3526) libstrongswan { dh_exponent_ansi_x9_42 = no integrity_test = yes crypto_test { required = yes on_add = yes } }