services.strongswan.ca

A set of CAs (certification authorities) and their options for the ‘ca xxx’ sections of the ipsec.conf file.

Type

attribute set of attribute set of string

Default

{ }

Example

{
  strongswan = {
    auto = "add";
    cacert = "/run/keys/strongswanCert.pem";
    crluri = "http://crl2.strongswan.org/strongswan.crl";
  };
}

Declared

<nixpkgs/nixos/modules/services/networking/strongswan.nix>