# /etc/strongswan.conf - strongSwan configuration file

pt-tls-client {
  load = random nonce openssl pem pkcs1 revocation curl tnc-tnccs tnc-imc tnc-imv tnccs-20 
}

libtls {
  version_max = 1.3
  suites = TLS_AES_128_GCM_SHA256
  ke_group = curve25519
}

libimcv {
  plugins {
    imc-test {
      command = allow
    }
    imv-test {
      rounds = 1
    }   
  }
}
