-certs {
- untrusted {
- dut = dut.crt
- }
-}
-
-keys {
- ecdsa = dut.key
-}
-
configs {
- test {
- proposal = aes128-sha1-modp1024
+ ike-ctr {
+ proposal = aes128ctr-aes128ccm8-aes128gcm8-aes128-sha1-modp1024
lhost = 172.16.1.10
rhost = 172.16.1.20
lid = dut.strongswan.org
rid = ls.strongswan.org
- child {
+ child-ctr {
lts = 10.10.10.1/24
rts = 10.20.20.1/24
}
+++ /dev/null
-
-certs {
- untrusted {
- dut = dut.crt
- }
-}
-
-keys {
- ecdsa = dut.key
-}
-
-configs {
- test {
- proposal = aes128ctr-sha1-modp1024,aes128-sha1-modp1024
- lhost = 172.16.1.10
- rhost = 172.16.1.20
- lid = dut.strongswan.org
- rid = ls.strongswan.org
- child {
- lts = 10.10.10.1/24
- rts = 10.20.20.1/24
- }
- }
-}
-certs {
- untrusted {
- dut = dut.crt
- }
-}
-
-keys {
- ecdsa = dut.key
-}
-
configs {
- test {
- proposal = aes128-sha1-modp1024
+ ike-ctr {
+ proposal = aes128ctr-aes128ccm8-aes128gcm8-aes128-sha1-modp1024
lhost = 172.16.1.10
rhost = 172.16.1.20
lid = dut.strongswan.org
rid = ls.strongswan.org
- child {
+ child-ctr {
lts = 10.10.10.1/24
rts = 10.20.20.1/24
}
+++ /dev/null
-
-certs {
- untrusted {
- dut = dut.crt
- }
-}
-
-keys {
- ecdsa = dut.key
-}
-
-configs {
- test {
- proposal = aes128ctr-sha1-modp1024,aes128-sha1-modp1024
- lhost = 172.16.1.10
- rhost = 172.16.1.20
- lid = dut.strongswan.org
- rid = ls.strongswan.org
- child {
- lts = 10.10.10.1/24
- rts = 10.20.20.1/24
- }
- }
-}
+++ /dev/null
------BEGIN CERTIFICATE-----
-MIIBcTCCARmgAwIBAgIJAJyGbmBb6ArKMAkGByqGSM49BAEwEDEOMAwGA1UEAxMF
-VEEyNTYwHhcNMTAxMDI5MTMxNDQ5WhcNMTMxMDI4MTMxNDQ5WjAOMQwwCgYDVQQD
-EwNkdXQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARHfNEEltMlHAgaxijhaLa0UGKI
-OS8I+9faQoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvn
-ZmIY7Dvg45np0JOzAI+N4q5m8Va+o2PT4QtOAcCjQjBAMB8GA1UdIwQYMBaAFGN+
-UXyZDNjgewnnhgj4Vq9qwZUwMB0GA1UdEQQWMBSCEmR1dC5zdHJvbmdzd2FuLm9y
-ZzAJBgcqhkjOPQQBA0cAMEQCIC2dlTEaLo+tRu2lQGDpdslCzJ3dSbHZUpem5m9x
-QPZSAiAhkxg3z9mPIz/Tm8EjYa0bNjgeP7Q+tr/PC3G8HCewOg==
------END CERTIFICATE-----
+++ /dev/null
------BEGIN EC PRIVATE KEY-----
-MIGkAgEBBDB4b056WXTlRSo/JvcXlLc+agOedUd6rpIIlRhj/wUw+mATVe41r56L
-cNf0EwqSgQCgBwYFK4EEACKhZANiAARHfNEEltMlHAgaxijhaLa0UGKIOS8I+9fa
-QoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvnZmIY7Dvg
-45np0JOzAI+N4q5m8Va+o2PT4QtOAcA=
------END EC PRIVATE KEY-----
+++ /dev/null
-
-certs {
- untrusted {
- dut = dut.crt
- }
-}
-
-keys {
- ecdsa = dut.key
-}
-
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.10
- rhost = 172.16.1.20
- lid = dut.strongswan.org
- rid = ls.strongswan.org
- child {
- lts = 10.10.10.1/24
- rts = 10.20.20.1/24
- }
- }
-}
+++ /dev/null
------BEGIN CERTIFICATE-----
-MIIBcTCCARmgAwIBAgIJAJyGbmBb6ArKMAkGByqGSM49BAEwEDEOMAwGA1UEAxMF
-VEEyNTYwHhcNMTAxMDI5MTMxNDQ5WhcNMTMxMDI4MTMxNDQ5WjAOMQwwCgYDVQQD
-EwNkdXQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARHfNEEltMlHAgaxijhaLa0UGKI
-OS8I+9faQoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvn
-ZmIY7Dvg45np0JOzAI+N4q5m8Va+o2PT4QtOAcCjQjBAMB8GA1UdIwQYMBaAFGN+
-UXyZDNjgewnnhgj4Vq9qwZUwMB0GA1UdEQQWMBSCEmR1dC5zdHJvbmdzd2FuLm9y
-ZzAJBgcqhkjOPQQBA0cAMEQCIC2dlTEaLo+tRu2lQGDpdslCzJ3dSbHZUpem5m9x
-QPZSAiAhkxg3z9mPIz/Tm8EjYa0bNjgeP7Q+tr/PC3G8HCewOg==
------END CERTIFICATE-----
+++ /dev/null
------BEGIN EC PRIVATE KEY-----
-MIGkAgEBBDB4b056WXTlRSo/JvcXlLc+agOedUd6rpIIlRhj/wUw+mATVe41r56L
-cNf0EwqSgQCgBwYFK4EEACKhZANiAARHfNEEltMlHAgaxijhaLa0UGKIOS8I+9fa
-QoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvnZmIY7Dvg
-45np0JOzAI+N4q5m8Va+o2PT4QtOAcA=
------END EC PRIVATE KEY-----
+++ /dev/null
-
-certs {
- untrusted {
- dut = dut.crt
- }
-}
-
-keys {
- ecdsa = dut.key
-}
-
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.10
- rhost = 172.16.1.20
- lid = dut.strongswan.org
- rid = ls.strongswan.org
- child {
- lts = 10.10.10.1/24
- rts = 10.20.20.1/24
- }
- }
-}
+++ /dev/null
------BEGIN CERTIFICATE-----
-MIIBcTCCARmgAwIBAgIJAJyGbmBb6ArKMAkGByqGSM49BAEwEDEOMAwGA1UEAxMF
-VEEyNTYwHhcNMTAxMDI5MTMxNDQ5WhcNMTMxMDI4MTMxNDQ5WjAOMQwwCgYDVQQD
-EwNkdXQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARHfNEEltMlHAgaxijhaLa0UGKI
-OS8I+9faQoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvn
-ZmIY7Dvg45np0JOzAI+N4q5m8Va+o2PT4QtOAcCjQjBAMB8GA1UdIwQYMBaAFGN+
-UXyZDNjgewnnhgj4Vq9qwZUwMB0GA1UdEQQWMBSCEmR1dC5zdHJvbmdzd2FuLm9y
-ZzAJBgcqhkjOPQQBA0cAMEQCIC2dlTEaLo+tRu2lQGDpdslCzJ3dSbHZUpem5m9x
-QPZSAiAhkxg3z9mPIz/Tm8EjYa0bNjgeP7Q+tr/PC3G8HCewOg==
------END CERTIFICATE-----
+++ /dev/null
------BEGIN EC PRIVATE KEY-----
-MIGkAgEBBDB4b056WXTlRSo/JvcXlLc+agOedUd6rpIIlRhj/wUw+mATVe41r56L
-cNf0EwqSgQCgBwYFK4EEACKhZANiAARHfNEEltMlHAgaxijhaLa0UGKIOS8I+9fa
-QoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvnZmIY7Dvg
-45np0JOzAI+N4q5m8Va+o2PT4QtOAcA=
------END EC PRIVATE KEY-----
+++ /dev/null
------BEGIN CERTIFICATE-----
-MIIBcTCCARmgAwIBAgIJAJyGbmBb6ArKMAkGByqGSM49BAEwEDEOMAwGA1UEAxMF
-VEEyNTYwHhcNMTAxMDI5MTMxNDQ5WhcNMTMxMDI4MTMxNDQ5WjAOMQwwCgYDVQQD
-EwNkdXQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARHfNEEltMlHAgaxijhaLa0UGKI
-OS8I+9faQoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvn
-ZmIY7Dvg45np0JOzAI+N4q5m8Va+o2PT4QtOAcCjQjBAMB8GA1UdIwQYMBaAFGN+
-UXyZDNjgewnnhgj4Vq9qwZUwMB0GA1UdEQQWMBSCEmR1dC5zdHJvbmdzd2FuLm9y
-ZzAJBgcqhkjOPQQBA0cAMEQCIC2dlTEaLo+tRu2lQGDpdslCzJ3dSbHZUpem5m9x
-QPZSAiAhkxg3z9mPIz/Tm8EjYa0bNjgeP7Q+tr/PC3G8HCewOg==
------END CERTIFICATE-----
+++ /dev/null
------BEGIN EC PRIVATE KEY-----
-MIGkAgEBBDB4b056WXTlRSo/JvcXlLc+agOedUd6rpIIlRhj/wUw+mATVe41r56L
-cNf0EwqSgQCgBwYFK4EEACKhZANiAARHfNEEltMlHAgaxijhaLa0UGKIOS8I+9fa
-QoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvnZmIY7Dvg
-45np0JOzAI+N4q5m8Va+o2PT4QtOAcA=
------END EC PRIVATE KEY-----
+++ /dev/null
------BEGIN CERTIFICATE-----
-MIIBcTCCARmgAwIBAgIJAJyGbmBb6ArKMAkGByqGSM49BAEwEDEOMAwGA1UEAxMF
-VEEyNTYwHhcNMTAxMDI5MTMxNDQ5WhcNMTMxMDI4MTMxNDQ5WjAOMQwwCgYDVQQD
-EwNkdXQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARHfNEEltMlHAgaxijhaLa0UGKI
-OS8I+9faQoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvn
-ZmIY7Dvg45np0JOzAI+N4q5m8Va+o2PT4QtOAcCjQjBAMB8GA1UdIwQYMBaAFGN+
-UXyZDNjgewnnhgj4Vq9qwZUwMB0GA1UdEQQWMBSCEmR1dC5zdHJvbmdzd2FuLm9y
-ZzAJBgcqhkjOPQQBA0cAMEQCIC2dlTEaLo+tRu2lQGDpdslCzJ3dSbHZUpem5m9x
-QPZSAiAhkxg3z9mPIz/Tm8EjYa0bNjgeP7Q+tr/PC3G8HCewOg==
------END CERTIFICATE-----
+++ /dev/null
------BEGIN EC PRIVATE KEY-----
-MIGkAgEBBDB4b056WXTlRSo/JvcXlLc+agOedUd6rpIIlRhj/wUw+mATVe41r56L
-cNf0EwqSgQCgBwYFK4EEACKhZANiAARHfNEEltMlHAgaxijhaLa0UGKIOS8I+9fa
-QoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvnZmIY7Dvg
-45np0JOzAI+N4q5m8Va+o2PT4QtOAcA=
------END EC PRIVATE KEY-----
--- /dev/null
+
+actions {
+ rekey_child {
+ config = child-default
+ delay = 10
+ }
+}
+++ /dev/null
------BEGIN CERTIFICATE-----
-MIIBcTCCARmgAwIBAgIJAJyGbmBb6ArKMAkGByqGSM49BAEwEDEOMAwGA1UEAxMF
-VEEyNTYwHhcNMTAxMDI5MTMxNDQ5WhcNMTMxMDI4MTMxNDQ5WjAOMQwwCgYDVQQD
-EwNkdXQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARHfNEEltMlHAgaxijhaLa0UGKI
-OS8I+9faQoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvn
-ZmIY7Dvg45np0JOzAI+N4q5m8Va+o2PT4QtOAcCjQjBAMB8GA1UdIwQYMBaAFGN+
-UXyZDNjgewnnhgj4Vq9qwZUwMB0GA1UdEQQWMBSCEmR1dC5zdHJvbmdzd2FuLm9y
-ZzAJBgcqhkjOPQQBA0cAMEQCIC2dlTEaLo+tRu2lQGDpdslCzJ3dSbHZUpem5m9x
-QPZSAiAhkxg3z9mPIz/Tm8EjYa0bNjgeP7Q+tr/PC3G8HCewOg==
------END CERTIFICATE-----
+++ /dev/null
------BEGIN EC PRIVATE KEY-----
-MIGkAgEBBDB4b056WXTlRSo/JvcXlLc+agOedUd6rpIIlRhj/wUw+mATVe41r56L
-cNf0EwqSgQCgBwYFK4EEACKhZANiAARHfNEEltMlHAgaxijhaLa0UGKIOS8I+9fa
-QoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvnZmIY7Dvg
-45np0JOzAI+N4q5m8Va+o2PT4QtOAcA=
------END EC PRIVATE KEY-----
--- /dev/null
+
+actions {
+ initiate {
+ config = child-default
+ }
+}
+++ /dev/null
-
-certs {
- untrusted {
- dut = dut.crt
- }
-}
-
-keys {
- ecdsa = dut.key
-}
-
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.10
- rhost = 172.16.1.20
- lid = dut.strongswan.org
- rid = ls.strongswan.org
- child {
- lts = 10.10.10.1/24
- rts = 10.20.20.1/24
- }
- }
-}
-
-actions {
- initiate {
- config = child
- delay = 0
- }
-}
+++ /dev/null
------BEGIN CERTIFICATE-----
-MIIBcTCCARmgAwIBAgIJAJyGbmBb6ArKMAkGByqGSM49BAEwEDEOMAwGA1UEAxMF
-VEEyNTYwHhcNMTAxMDI5MTMxNDQ5WhcNMTMxMDI4MTMxNDQ5WjAOMQwwCgYDVQQD
-EwNkdXQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARHfNEEltMlHAgaxijhaLa0UGKI
-OS8I+9faQoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvn
-ZmIY7Dvg45np0JOzAI+N4q5m8Va+o2PT4QtOAcCjQjBAMB8GA1UdIwQYMBaAFGN+
-UXyZDNjgewnnhgj4Vq9qwZUwMB0GA1UdEQQWMBSCEmR1dC5zdHJvbmdzd2FuLm9y
-ZzAJBgcqhkjOPQQBA0cAMEQCIC2dlTEaLo+tRu2lQGDpdslCzJ3dSbHZUpem5m9x
-QPZSAiAhkxg3z9mPIz/Tm8EjYa0bNjgeP7Q+tr/PC3G8HCewOg==
------END CERTIFICATE-----
+++ /dev/null
------BEGIN EC PRIVATE KEY-----
-MIGkAgEBBDB4b056WXTlRSo/JvcXlLc+agOedUd6rpIIlRhj/wUw+mATVe41r56L
-cNf0EwqSgQCgBwYFK4EEACKhZANiAARHfNEEltMlHAgaxijhaLa0UGKIOS8I+9fa
-QoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvnZmIY7Dvg
-45np0JOzAI+N4q5m8Va+o2PT4QtOAcA=
------END EC PRIVATE KEY-----
--- /dev/null
+
+actions {
+ initiate {
+ config = child-default
+ }
+}
+++ /dev/null
-
-certs {
- untrusted {
- dut = dut.crt
- }
-}
-
-keys {
- ecdsa = dut.key
-}
-
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.10
- rhost = 172.16.1.20
- lid = dut.strongswan.org
- rid = ls.strongswan.org
- child {
- lts = 10.10.10.1/24
- rts = 10.20.20.1/24
- }
- }
-}
-
-actions {
- initiate {
- config = child
- delay = 0
- }
-}
+++ /dev/null
------BEGIN CERTIFICATE-----
-MIIBcTCCARmgAwIBAgIJAJyGbmBb6ArKMAkGByqGSM49BAEwEDEOMAwGA1UEAxMF
-VEEyNTYwHhcNMTAxMDI5MTMxNDQ5WhcNMTMxMDI4MTMxNDQ5WjAOMQwwCgYDVQQD
-EwNkdXQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARHfNEEltMlHAgaxijhaLa0UGKI
-OS8I+9faQoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvn
-ZmIY7Dvg45np0JOzAI+N4q5m8Va+o2PT4QtOAcCjQjBAMB8GA1UdIwQYMBaAFGN+
-UXyZDNjgewnnhgj4Vq9qwZUwMB0GA1UdEQQWMBSCEmR1dC5zdHJvbmdzd2FuLm9y
-ZzAJBgcqhkjOPQQBA0cAMEQCIC2dlTEaLo+tRu2lQGDpdslCzJ3dSbHZUpem5m9x
-QPZSAiAhkxg3z9mPIz/Tm8EjYa0bNjgeP7Q+tr/PC3G8HCewOg==
------END CERTIFICATE-----
+++ /dev/null
------BEGIN EC PRIVATE KEY-----
-MIGkAgEBBDB4b056WXTlRSo/JvcXlLc+agOedUd6rpIIlRhj/wUw+mATVe41r56L
-cNf0EwqSgQCgBwYFK4EEACKhZANiAARHfNEEltMlHAgaxijhaLa0UGKIOS8I+9fa
-QoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvnZmIY7Dvg
-45np0JOzAI+N4q5m8Va+o2PT4QtOAcA=
------END EC PRIVATE KEY-----
--- /dev/null
+
+actions {
+ initiate {
+ config = child-default
+ }
+}
+++ /dev/null
-
-certs {
- untrusted {
- dut = dut.crt
- }
-}
-
-keys {
- ecdsa = dut.key
-}
-
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.10
- rhost = 172.16.1.20
- lid = dut.strongswan.org
- rid = ls.strongswan.org
- child {
- lts = 10.10.10.1/24
- rts = 10.20.20.1/24
- }
- }
-}
-
-actions {
- initiate {
- config = child
- delay = 0
- }
-}
+++ /dev/null
------BEGIN CERTIFICATE-----
-MIIBcTCCARmgAwIBAgIJAJyGbmBb6ArKMAkGByqGSM49BAEwEDEOMAwGA1UEAxMF
-VEEyNTYwHhcNMTAxMDI5MTMxNDQ5WhcNMTMxMDI4MTMxNDQ5WjAOMQwwCgYDVQQD
-EwNkdXQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARHfNEEltMlHAgaxijhaLa0UGKI
-OS8I+9faQoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvn
-ZmIY7Dvg45np0JOzAI+N4q5m8Va+o2PT4QtOAcCjQjBAMB8GA1UdIwQYMBaAFGN+
-UXyZDNjgewnnhgj4Vq9qwZUwMB0GA1UdEQQWMBSCEmR1dC5zdHJvbmdzd2FuLm9y
-ZzAJBgcqhkjOPQQBA0cAMEQCIC2dlTEaLo+tRu2lQGDpdslCzJ3dSbHZUpem5m9x
-QPZSAiAhkxg3z9mPIz/Tm8EjYa0bNjgeP7Q+tr/PC3G8HCewOg==
------END CERTIFICATE-----
+++ /dev/null
------BEGIN EC PRIVATE KEY-----
-MIGkAgEBBDB4b056WXTlRSo/JvcXlLc+agOedUd6rpIIlRhj/wUw+mATVe41r56L
-cNf0EwqSgQCgBwYFK4EEACKhZANiAARHfNEEltMlHAgaxijhaLa0UGKIOS8I+9fa
-QoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvnZmIY7Dvg
-45np0JOzAI+N4q5m8Va+o2PT4QtOAcA=
------END EC PRIVATE KEY-----
+++ /dev/null
-
-certs {
- untrusted {
- dut = dut.crt
- }
-}
-
-keys {
- ecdsa = dut.key
-}
-
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.10
- rhost = 172.16.1.20
- lid = dut.strongswan.org
- rid = ls.strongswan.org
- child {
- lts = 10.10.10.1/24
- rts = 10.20.20.1/24
- }
- }
-}
+++ /dev/null
------BEGIN CERTIFICATE-----
-MIIBcTCCARmgAwIBAgIJAJyGbmBb6ArKMAkGByqGSM49BAEwEDEOMAwGA1UEAxMF
-VEEyNTYwHhcNMTAxMDI5MTMxNDQ5WhcNMTMxMDI4MTMxNDQ5WjAOMQwwCgYDVQQD
-EwNkdXQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARHfNEEltMlHAgaxijhaLa0UGKI
-OS8I+9faQoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvn
-ZmIY7Dvg45np0JOzAI+N4q5m8Va+o2PT4QtOAcCjQjBAMB8GA1UdIwQYMBaAFGN+
-UXyZDNjgewnnhgj4Vq9qwZUwMB0GA1UdEQQWMBSCEmR1dC5zdHJvbmdzd2FuLm9y
-ZzAJBgcqhkjOPQQBA0cAMEQCIC2dlTEaLo+tRu2lQGDpdslCzJ3dSbHZUpem5m9x
-QPZSAiAhkxg3z9mPIz/Tm8EjYa0bNjgeP7Q+tr/PC3G8HCewOg==
------END CERTIFICATE-----
+++ /dev/null
------BEGIN EC PRIVATE KEY-----
-MIGkAgEBBDB4b056WXTlRSo/JvcXlLc+agOedUd6rpIIlRhj/wUw+mATVe41r56L
-cNf0EwqSgQCgBwYFK4EEACKhZANiAARHfNEEltMlHAgaxijhaLa0UGKIOS8I+9fa
-QoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvnZmIY7Dvg
-45np0JOzAI+N4q5m8Va+o2PT4QtOAcA=
------END EC PRIVATE KEY-----
+++ /dev/null
-
-certs {
- untrusted {
- dut = dut.crt
- }
-}
-
-keys {
- ecdsa = dut.key
-}
-
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.10
- rhost = 172.16.1.20
- lid = dut.strongswan.org
- rid = ls.strongswan.org
- child {
- lts = 10.10.10.1/24
- rts = 10.20.20.1/24
- }
- }
-}
+++ /dev/null
------BEGIN CERTIFICATE-----
-MIIBcTCCARmgAwIBAgIJAJyGbmBb6ArKMAkGByqGSM49BAEwEDEOMAwGA1UEAxMF
-VEEyNTYwHhcNMTAxMDI5MTMxNDQ5WhcNMTMxMDI4MTMxNDQ5WjAOMQwwCgYDVQQD
-EwNkdXQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARHfNEEltMlHAgaxijhaLa0UGKI
-OS8I+9faQoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvn
-ZmIY7Dvg45np0JOzAI+N4q5m8Va+o2PT4QtOAcCjQjBAMB8GA1UdIwQYMBaAFGN+
-UXyZDNjgewnnhgj4Vq9qwZUwMB0GA1UdEQQWMBSCEmR1dC5zdHJvbmdzd2FuLm9y
-ZzAJBgcqhkjOPQQBA0cAMEQCIC2dlTEaLo+tRu2lQGDpdslCzJ3dSbHZUpem5m9x
-QPZSAiAhkxg3z9mPIz/Tm8EjYa0bNjgeP7Q+tr/PC3G8HCewOg==
------END CERTIFICATE-----
+++ /dev/null
------BEGIN EC PRIVATE KEY-----
-MIGkAgEBBDB4b056WXTlRSo/JvcXlLc+agOedUd6rpIIlRhj/wUw+mATVe41r56L
-cNf0EwqSgQCgBwYFK4EEACKhZANiAARHfNEEltMlHAgaxijhaLa0UGKIOS8I+9fa
-QoQ1oZJ5pupiTSYwJLO+FDJYKEITwy3bA0Ss0S0mijpdgF5HTXRqByvnZmIY7Dvg
-45np0JOzAI+N4q5m8Va+o2PT4QtOAcA=
------END EC PRIVATE KEY-----
certs {
+ trusted {
+ TA256 = TA256.crt
+ TA384 = TA384.crt
+ }
untrusted {
+ ICA256 = ICA256.crt
+ ICA384 = ICA384.crt
+ ICAlowhigh = ICAlowhigh.crt
+ ICARSA = ICARSA.crt
dut = dut.crt
}
}
}
configs {
- test {
+ ike-default {
proposal = aes128-sha1-modp1024
lhost = 172.16.1.10
rhost = 172.16.1.20
lid = dut.strongswan.org
rid = ls.strongswan.org
- child {
+ child-default {
lts = 10.10.10.1/24
rts = 10.20.20.1/24
}
}
}
-
-actions {
- rekey_child {
- config = child
- delay = 10
- }
-}