--- /dev/null
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- /dev/null
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----
--- /dev/null
+
+certs {
+ trusted {
+ x509-TApol1 = TApol1.crt
+ }
+}
+
+configs {
+ ike-pol {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.10
+ rhost = 172.16.1.20
+ lid = dut.strongswan.org
+ rid = ls-pol.strongswan.org
+ cert_policy = 1.2.34.568
+ child-pol {
+ lts = 10.10.10.0/24
+ rts = 10.20.20.0/24
+ }
+ }
+}
--- /dev/null
+
+certs {
+ trusted {
+ x509-TApol1 = TApol1.crt
+ }
+ untrusted {
+ x509-cft = cft.crt
+ }
+}
+
+configs {
+ ike-pol {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.20
+ rhost = 172.16.1.10
+ lid = ls-pol.strongswan.org
+ rid = dut.strongswan.org
+ child-pol {
+ lts = 10.20.20.0/24
+ rts = 10.10.10.0/24
+ }
+ }
+}
+
+actions {
+ initiate {
+ config = child-pol
+ }
+}