services.strongswan-swanctl.swanctl.connections.<name>.remote.<name>

Authentication to expect from remote

Identity in CA certificate to accept for authentication

Section for a CA certificate to accept for authentication

List of CA certificates to accept for authentication

Section for a certificate candidate to use for authentication

List of certificate policy OIDs the peer's certificate must have

List of certificates to accept for authentication

Identity to use as peer identity during EAP authentication

Authorization group memberships to require

IKE identity to expect for authentication round

List of raw public keys to accept for authentication

Certificate revocation policy for CRL or OCSP revocation

Optional numeric identifier by which authentication rounds are sorted