Annotation of embedaddon/strongswan/testing/tests/ikev2/multi-level-ca-strict/hosts/moon/etc/ipsec.conf, revision 1.1.1.1

1.1       misho       1: # /etc/ipsec.conf - strongSwan IPsec configuration file
                      2: 
                      3: config setup
                      4:        strictcrlpolicy=yes
                      5: 
                      6: ca strongswan
                      7:        cacert=strongswanCert.pem
                      8:        crluri=http://crl.strongswan.org/strongswan.crl
                      9:        auto=add
                     10: 
                     11: conn %default
                     12:        ikelifetime=60m
                     13:        keylife=20m
                     14:        rekeymargin=3m
                     15:        keyingtries=1
                     16:        keyexchange=ikev2
                     17:        left=PH_IP_MOON
                     18:        leftcert=moonCert.pem
                     19:        leftsendcert=ifasked
                     20:        leftid=@moon.strongswan.org
                     21: 
                     22: conn alice
                     23:        leftsubnet=PH_IP_ALICE/32
                     24:        right=%any
                     25:        rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA"
                     26:        auto=add
                     27: 
                     28: conn venus
                     29:        leftsubnet=PH_IP_VENUS/32
                     30:        right=%any
                     31:        rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA"
                     32:        auto=add

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>