--- /dev/null
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- /dev/null
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----
--- /dev/null
+
+certs {
+ trusted {
+ x509-TApol1 = TApol1.crt
+ }
+}
+
+configs {
+ ike-pol {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.10
+ rhost = 172.16.1.20
+ lid = dut.strongswan.org
+ rid = ls-pol.strongswan.org
+ cert_policy = 1.2.34.567
+ child-pol {
+ lts = 10.10.10.0/24
+ rts = 10.20.20.0/24
+ }
+ }
+}
--- /dev/null
+
+certs {
+ trusted {
+ x509-TApol1 = TApol1.crt
+ }
+ untrusted {
+ x509-cft = cft.crt
+ }
+}
+
+configs {
+ ike-pol {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.20
+ rhost = 172.16.1.10
+ lid = ls-pol.strongswan.org
+ rid = dut.strongswan.org
+ child-pol {
+ lts = 10.20.20.0/24
+ rts = 10.10.10.0/24
+ }
+ }
+}
+
+actions {
+ initiate {
+ config = child-pol
+ }
+}