docker/tnc/strongswan.conf.client at master · strongX509/docker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
# strongSwan configuration file

charon {
   start-scripts {
      creds = swanctl --load-creds
      conns = swanctl --load-conns
   }
   filelog {
      stderr {
         default = 1
         tnc = 2
         imc = 2
      }
   }
   fragment_size = 1500

   plugins {
     eap-ttls {
         max_message_count = 0
      }
      eap-tnc {
         max_message_count = 0
      }
      tnccs-20 {
         max_batch_size   = 32754
         max_message_size = 32722
      }
   }
}

libimcv {
   plugins {
      imc-os {
         # no unique /var/lib/dbus/machine-id on client, set manually
         device_id = a488651e36664792b306cf8be72dd630
      }
      imc-swima {
         swid_full = yes
         swid_database = sqlite:///etc/pts/collector.db
      }
   }
}

libtls {
   suites = TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}

sw-collector {
   database = sqlite:///etc/pts/collector.db
   history = /var/log/apt/history.log
   rest_api {
      uri = http://admin-user:strongSwan@tnc/api/
   }
}