Annotation of embedaddon/strongswan/testing/tests/ikev1/multi-level-ca/hosts/moon/etc/ipsec.conf, revision 1.1.1.1
1.1 misho 1: # /etc/ipsec.conf - strongSwan IPsec configuration file
2:
3: config setup
4:
5: ca strongswan
6: cacert=strongswanCert.pem
7: crluri=http://crl.strongswan.org/strongswan.crl
8: auto=add
9:
10: conn %default
11: ikelifetime=60m
12: keylife=20m
13: rekeymargin=3m
14: keyingtries=1
15: keyexchange=ikev1
16: left=PH_IP_MOON
17: leftcert=moonCert.pem
18: leftsendcert=ifasked
19: leftid=@moon.strongswan.org
20:
21: conn alice
22: leftsubnet=PH_IP_ALICE/32
23: right=%any
24: rightca="C=CH, O=strongSwan Project, OU=Research, CN=Research CA"
25: auto=add
26:
27: conn venus
28: leftsubnet=PH_IP_VENUS/32
29: right=%any
30: rightca="C=CH, O=strongSwan Project, OU=Sales, CN=Sales CA"
31: auto=add
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>