# /etc/strongswan.conf - strongSwan configuration file charon { load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 revocation hmac stroke kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-tnccs tnccs-20 tnc-imv updown multiple_authentication=no plugins { eap-ttls { request_peer_auth = yes phase2_piggyback = yes phase2_tnc = yes } eap-tnc { protocol = tnccs-2.0 } } } libimcv { plugins { imv-scanner { closed_port_policy = no tcp_ports = 80 443 udp_ports = } } }