testing/tests/self-signed/hosts/carol/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 version 2.0     # conforms to second version of ipsec.conf specification
   4
   5 config setup
   6         plutodebug=control
   7         crlcheckinterval=0
   8         strictcrlpolicy=no
   9         nocrsend=yes
  10
  11 conn %default
  12         ikelifetime=60m
  13         keylife=20m
  14         rekeymargin=3m
  15         keyingtries=1
  16
  17 conn home
  18         left=PH_IP_CAROL
  19         leftnexthop=%direct
  20         leftcert=selfCert.der
  21         leftsendcert=never
  22         leftfirewall=yes
  23         right=PH_IP_MOON
  24         rightsubnet=10.1.0.0/16
  25         rightcert=peerCert.der
  26         rightid=@moon.strongswan.org
  27         auto=add