--- /dev/null
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- /dev/null
+-----BEGIN CERTIFICATE-----
+MIIBqzCCATCgAwIBAgIIWAQDF5K3VYcwCgYIKoZIzj0EAwMwETEPMA0GA1UEAxMG
+VEFwb2wxMB4XDTEwMTIxNjE0Mjk1MFoXDTEzMTIxNTE0Mjk1MFowDjEMMAoGA1UE
+AxMDQ0ZUMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEEYKkqa/XU5tcNg/+RGJSTTtB
+6Y9Nxo1Au51SZnApd0JwA9zBp/MKMTw7VIC2m7zWuETvHvy+HBLCaehCOWJjIXH1
+q76MYF4+ZpwF3VnH2p1PpScFoBX4yHeEsEtgY5wDo1gwVjAfBgNVHSMEGDAWgBRH
+SKx50/bhzh0tDn75Zgxx9PttfzAgBgNVHREEGTAXghVscy1wb2wuc3Ryb25nc3dh
+bi5vcmcwEQYDVR0gBAowCDAGBgQqIoQ3MAoGCCqGSM49BAMDA2kAMGYCMQCJnrdr
++mRibuxaQu0zN8YQutWX8TqCeJEzsashimO8rRKy/2bqS5gwYkCRQwIukSsCMQCh
+k+bJlOQZS7DiGYox4xq4BVS9kTGrStLbiVcTFPkof90vvoAUaBiix4FPE/UbOfc=
+-----END CERTIFICATE-----
--- /dev/null
+
+certs {
+ trusted {
+ x509-TApol1 = TApol1.crt
+ }
+}
+
+configs {
+ ike-pol {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.10
+ rhost = 172.16.1.20
+ lid = dut.strongswan.org
+ rid = ls-pol.strongswan.org
+ cert_policy = 1.2.34.567
+ child-pol {
+ lts = 10.10.10.0/24
+ rts = 10.20.20.0/24
+ }
+ }
+}
--- /dev/null
+
+certs {
+ trusted {
+ x509-TApol1 = TApol1.crt
+ }
+ untrusted {
+ x509-cft = cft.crt
+ }
+}
+
+configs {
+ ike-pol {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.20
+ rhost = 172.16.1.10
+ lid = ls-pol.strongswan.org
+ rid = dut.strongswan.org
+ child-pol {
+ lts = 10.20.20.0/24
+ rts = 10.10.10.0/24
+ }
+ }
+}
+
+actions {
+ initiate {
+ config = child-pol
+ }
+}