--- /dev/null
+-----BEGIN CERTIFICATE-----
+MIIBcjCB+qADAgECAghLwr6vu0UOMzAKBggqhkjOPQQDAzAQMQ4wDAYDVQQDEwVU
+QTM4NDAeFw0xMDEyMTMxNDAyNTRaFw0xMzEyMTIxNDAyNTRaMA4xDDAKBgNVBAMT
+A0NBMjB2MBAGByqGSM49AgEGBSuBBAAiA2IABAAgRfqfkOjqVV5b9BLMiHMobrMh
+Mg6eJmwGKWQ4Do0lv86in63OY2ViHQ90g8RrxBNcXBZ3F7vUxTH1ilsg3w105ISl
+asDgtxk1DG7NoBd+JRkvn67ka3wWOzwpu+fIUaMjMCEwHwYDVR0jBBgwFoAUR0is
+edP24c4dLQ5++WYMcfT7bX8wCgYIKoZIzj0EAwMDZwAwZAIwWT/kbzWb/1bmzzF9
+D9t2FFNiqqgUYX9DEOE0m06s8iSOcXLLai4w4sk0Lt1CrfLvAjBF+Yd2+zSI7QQ9
+B4/PdHm3Zar6VA4txDHYqcaAJx5ENp4gEGarGR3XiB3IiHZVr4k=
+-----END CERTIFICATE-----
--- /dev/null
+-----BEGIN EC PRIVATE KEY-----
+MIGkAgEBBDDOG1k9KJRcUyEYgUQx6QyFtOogUx75Ahzr+UFOWwwzUOMwHqjeEja4
+o15YIQDdO4egBwYFK4EEACKhZANiAAQAIEX6n5Do6lVeW/QSzIhzKG6zITIOniZs
+BilkOA6NJb/Oop+tzmNlYh0PdIPEa8QTXFwWdxe71MUx9YpbIN8NdOSEpWrA4LcZ
+NQxuzaAXfiUZL5+u5Gt8Fjs8KbvnyFE=
+-----END EC PRIVATE KEY-----
--- /dev/null
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- /dev/null
+
+configs {
+ ike-ca2 {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.10
+ rhost = 172.16.1.20
+ lid = dut.strongswan.org
+ rid = ls-ca2.strongswan.org
+ child-ca2 {
+ lts = 10.10.10.0/24
+ rts = 10.20.20.0/24
+ }
+ }
+}
--- /dev/null
+
+certs {
+ untrusted {
+ x509-ca2 = ca2.crt
+ x509-cft = cft.crt
+ }
+}
+
+configs {
+ ike-ca2 {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.20
+ rhost = 172.16.1.10
+ lid = ls-ca2.strongswan.org
+ rid = dut.strongswan.org
+ child-ca2 {
+ lts = 10.20.20.0/24
+ rts = 10.10.10.0/24
+ }
+ }
+}
+
+actions {
+ initiate {
+ config = child-ca2
+ }
+}