testing/tests/gcrypt-ikev1/rw-cert/hosts/carol/etc/strongswan.conf


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

# /etc/strongswan.conf - strongSwan configuration file

pluto {
  load = test-vectors pem pkcs1 x509 gcrypt hmac curl kernel-netlink
}

# pluto uses optimized DH exponent sizes (RFC 3526)

libstrongswan {
  dh_exponent_ansi_x9_42 = no
  integrity_test = yes
  crypto_test {
    on_add = yes
  }
}