--- /dev/null
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- /dev/null
+
+configs {
+ ike-foo {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.10
+ rhost = 172.16.1.20
+ lid = dut.strongswan.org
+ rid = ls-bitchanged.strongswan.org
+ child-foo {
+ lts = 10.10.10.0/24
+ rts = 10.20.20.0/24
+ }
+ }
+}
--- /dev/null
+
+certs {
+ untrusted {
+ x509-cft = cft.crt
+ }
+}
+
+
+configs {
+ ike-bitchanged {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.20
+ rhost = 172.16.1.10
+ lid = ls-bitchanged.strongswan.org
+ rid = dut.strongswan.org
+ child-bitchanged {
+ lts = 10.20.20.0/24
+ rts = 10.10.10.0/24
+ }
+ }
+}
+
+actions {
+ initiate {
+ config = child-bitchanged
+ }
+}