Annotation of embedaddon/strongswan/testing/tests/ikev2/multi-level-ca-strict/hosts/moon/etc/ipsec.conf, revision 1.1.1.1
1.1 misho 1: # /etc/ipsec.conf - strongSwan IPsec configuration file
2:
3: config setup
4: strictcrlpolicy=yes
5:
6: ca strongswan
7: cacert=strongswanCert.pem
8: crluri=http://crl.strongswan.org/strongswan.crl
9: auto=add
10:
11: conn %default
12: ikelifetime=60m
13: keylife=20m
14: rekeymargin=3m
15: keyingtries=1
16: keyexchange=ikev2
17: left=PH_IP_MOON
18: leftcert=moonCert.pem
19: leftsendcert=ifasked
20: leftid=@moon.strongswan.org
21:
22: conn alice
23: leftsubnet=PH_IP_ALICE/32
24: right=%any
25: rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA"
26: auto=add
27:
28: conn venus
29: leftsubnet=PH_IP_VENUS/32
30: right=%any
31: rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA"
32: auto=add
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>