testing/tests/gcrypt-ikev1/rw-cert/hosts/dave/etc/strongswan.conf


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

# /etc/strongswan.conf - strongSwan configuration file

pluto {
  load = test-vectors aes des sha1 sha2 md5 gmp pubkey random hmac curl
}

# pluto uses optimized DH exponent sizes (RFC 3526)

libstrongswan {
  dh_exponent_ansi_x9_42 = no
  integrity_test = yes
  crypto_test {
    required = yes
    on_add = yes
  } 
}