testing/tests/ocsp-revoked/hosts/moon/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 version 2.0     # conforms to second version of ipsec.conf specification
   4
   5 config setup
   6         plutodebug=control
   7         crlcheckinterval=180
   8         strictcrlpolicy=yes
   9
  10 ca strongswan
  11         cacert=strongswanCert.pem
  12         ocspuri=http://ocsp.strongswan.org:8880
  13         auto=add
  14
  15 conn %default
  16         ikelifetime=60m
  17         keylife=20m
  18         rekeymargin=3m
  19         keyingtries=1
  20         left=PH_IP_MOON
  21         leftnexthop=%direct
  22         leftcert=moonCert.pem
  23         leftid=@moon.strongswan.org
  24
  25 conn net-net
  26         leftsubnet=10.1.0.0/16
  27         right=PH_IP_SUN
  28         rightsubnet=10.2.0.0/16
  29         rightid=@sun.strongswan.org
  30         auto=add
  31
  32 conn host-host
  33         right=PH_IP_SUN
  34         rightid=@sun.strongswan.org
  35         auto=add
  36
  37 conn rw
  38         leftsubnet=10.1.0.0/16
  39         right=%any
  40         auto=add