--- /dev/null
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- /dev/null
+-----BEGIN EC PRIVATE KEY-----
+MIGkAgEBBDDOG1k9KJRcUyEYgUQx6QyFtOogUx75Ahzr+UFOWwwzUOMwHqjeEja4
+o15YIQDdO4egBwYFK4EEACKhZANiAAQAIEX6n5Do6lVeW/QSzIhzKG6zITIOniZs
+BilkOA6NJb/Oop+tzmNlYh0PdIPEa8QTXFwWdxe71MUx9YpbIN8NdOSEpWrA4LcZ
+NQxuzaAXfiUZL5+u5Gt8Fjs8KbvnyFE=
+-----END EC PRIVATE KEY-----
--- /dev/null
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- /dev/null
+
+configs {
+ ike-ca3 {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.10
+ rhost = 172.16.1.20
+ lid = dut.strongswan.org
+ rid = ls-ca3.strongswan.org
+ child-ca3 {
+ lts = 10.10.10.0/24
+ rts = 10.20.20.0/24
+ }
+ }
+}
--- /dev/null
+
+certs {
+ untrusted {
+ x509-ca3 = ca3.crt
+ x509-cft = cft.crt
+ }
+}
+
+configs {
+ ike-ca3 {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.20
+ rhost = 172.16.1.10
+ lid = ls-ca3.strongswan.org
+ rid = dut.strongswan.org
+ child-ca3 {
+ lts = 10.20.20.0/24
+ rts = 10.10.10.0/24
+ }
+ }
+}
+
+actions {
+ initiate {
+ config = child-ca3
+ }
+}