--- /dev/null
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- /dev/null
+-----BEGIN EC PRIVATE KEY-----
+MIGkAgEBBDDOG1k9KJRcUyEYgUQx6QyFtOogUx75Ahzr+UFOWwwzUOMwHqjeEja4
+o15YIQDdO4egBwYFK4EEACKhZANiAAQAIEX6n5Do6lVeW/QSzIhzKG6zITIOniZs
+BilkOA6NJb/Oop+tzmNlYh0PdIPEa8QTXFwWdxe71MUx9YpbIN8NdOSEpWrA4LcZ
+NQxuzaAXfiUZL5+u5Gt8Fjs8KbvnyFE=
+-----END EC PRIVATE KEY-----
--- /dev/null
+-----BEGIN CERTIFICATE-----
+MIIBlDCCARugAwIBAgIJAJCVoWUQZl21MAoGCCqGSM49BAMDMA4xDDAKBgNVBAMT
+A0NBMjAeFw0xMDEyMTMxMzU1NTFaFw0xMzEyMTIxMzU1NTFaMA4xDDAKBgNVBAMT
+A0NGVDB2MBAGByqGSM49AgEGBSuBBAAiA2IABBGCpKmv11ObXDYP/kRiUk07QemP
+TcaNQLudUmZwKXdCcAPcwafzCjE8O1SAtpu81rhE7x78vhwSwmnoQjliYyFx9au+
+jGBePmacBd1Zx9qdT6UnBaAV+Mh3hLBLYGOcA6NFMEMwHwYDVR0jBBgwFoAU+3H7
+QbnPCPnLVJa3ysZvmU1wh9wwIAYDVR0RBBkwF4IVbHMtY2EyLnN0cm9uZ3N3YW4u
+b3JnMAoGCCqGSM49BAMDA2cAMGQCMEudTuWuWi9SnyCN+8jiSV2ViyO90t3Liykn
+BiWS0bNO1dcLo9TW3EUFe8L5nX+pwAIwH1sUCIGpxdWJud2nM0iaJboSDc98FUu6
+5i/OUlc8PBDmUQ2U5zk5oNus0sy3a8Wr
+-----END CERTIFICATE-----
--- /dev/null
+
+configs {
+ ike-ca2 {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.10
+ rhost = 172.16.1.20
+ lid = dut.strongswan.org
+ rid = ls-ca2.strongswan.org
+ child-ca2 {
+ lts = 10.10.10.0/24
+ rts = 10.20.20.0/24
+ }
+ }
+}
--- /dev/null
+
+certs {
+ untrusted {
+ x509-ca2 = ca2.crt
+ x509-cft = cft.crt
+ }
+}
+
+configs {
+ ike-ca2 {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.20
+ rhost = 172.16.1.10
+ lid = ls-ca2.strongswan.org
+ rid = dut.strongswan.org
+ child-ca2 {
+ lts = 10.20.20.0/24
+ rts = 10.10.10.0/24
+ }
+ }
+}
+
+actions {
+ initiate {
+ config = child-ca2
+ }
+}