/* Identities */ INSERT INTO identities ( type, data ) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' ); INSERT INTO identities ( type, data ) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ 11, X'CA_SPK_HEX' ); INSERT INTO identities ( type, data ) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ 11, X'CA_SPKI_HEX' ); INSERT INTO identities ( type, data ) VALUES ( /* moon.strongswan.org */ 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' ); INSERT INTO identities ( type, data ) VALUES ( /* sun.strongswan.org */ 2, X'73756e2e7374726f6e677377616e2e6f7267' ); INSERT INTO identities ( type, data ) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=sun.strongswan.org' */ 11, X'SUN_SPK_HEX' ); /* Certificates */ INSERT INTO certificates ( type, keytype, data ) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ 1, 1, X'CA_CERT_PEM_HEX' ); INSERT INTO certificates ( type, keytype, data ) VALUES ( /* C=CH, O=strongSwan Project, CN=sun.strongswan.org */ 1, 1, X'SUN_CERT_PEM_HEX' ); INSERT INTO certificate_identity ( certificate, identity ) VALUES ( 1, 1 ); INSERT INTO certificate_identity ( certificate, identity ) VALUES ( 1, 2 ); INSERT INTO certificate_identity ( certificate, identity ) VALUES ( 1, 3 ); INSERT INTO certificate_identity ( certificate, identity ) VALUES ( 2, 5 ); INSERT INTO certificate_identity ( certificate, identity ) VALUES ( 2, 6 ); /* Private Keys */ INSERT INTO private_keys ( type, data ) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=sun.strongswan.org' */ 1, X'SUN_KEY_PEM_HEX' ); INSERT INTO private_key_identity ( private_key, identity ) VALUES ( 1, 5 ); INSERT INTO private_key_identity ( private_key, identity ) VALUES ( 1, 6 ); /* Proposals */ INSERT INTO proposals ( proposal ) VALUES ( 'aes128-sha256-modp3072' ); INSERT INTO proposals ( proposal ) VALUES ( 'aes192-sha384-modp8192' ); INSERT INTO proposals ( proposal ) VALUES ( 'aes128gcm16-modp3072' ); INSERT INTO proposals ( proposal ) VALUES ( 'aes192gcm16-modp8192' ); /* Configurations */ INSERT INTO ike_configs ( local, remote ) VALUES ( 'PH_IP_SUN', 'PH_IP_MOON' ); INSERT INTO ike_config_proposal ( ike_cfg, prio, prop ) VALUES ( 1, 1, 1 ); INSERT INTO ike_config_proposal ( ike_cfg, prio, prop ) VALUES ( 1, 2, 2 ); INSERT INTO peer_configs ( name, ike_cfg, local_id, remote_id, mobike, dpd_delay ) VALUES ( 'net-net', 1, 5, 4, 0, 30 ); INSERT INTO child_configs ( name, updown, start_action, dpd_action ) VALUES ( 'net-1', '/usr/local/libexec/ipsec/_updown iptables', 0, 0 ); INSERT INTO child_configs ( name, updown, start_action, dpd_action ) VALUES ( 'net-2', '/usr/local/libexec/ipsec/_updown iptables', 0, 0 ); INSERT INTO child_configs ( name, updown, start_action, dpd_action ) VALUES ( 'net-3', '/usr/local/libexec/ipsec/_updown iptables', 0, 0 ); INSERT INTO peer_config_child_config ( peer_cfg, child_cfg ) VALUES ( 1, 1 ); INSERT INTO peer_config_child_config ( peer_cfg, child_cfg ) VALUES ( 1, 2 ); INSERT INTO peer_config_child_config ( peer_cfg, child_cfg ) VALUES ( 1, 3 ); INSERT INTO child_config_proposal ( child_cfg, prio, prop ) VALUES ( 1, 1, 3 ); INSERT INTO child_config_proposal ( child_cfg, prio, prop ) VALUES ( 2, 1, 4 ); INSERT INTO child_config_proposal ( child_cfg, prio, prop ) VALUES ( 3, 1, 4 ); INSERT INTO traffic_selectors ( type, start_addr, end_addr ) VALUES ( 7, X'0a010000', X'0a01000f' ); INSERT INTO traffic_selectors ( type, start_addr, end_addr ) VALUES ( 7, X'0a010010', X'0a01001f' ); INSERT INTO traffic_selectors ( type, start_addr, end_addr ) VALUES ( 7, X'0a010200', X'0a0103ff' ); INSERT INTO traffic_selectors ( type, start_addr, end_addr ) VALUES ( 7, X'0a020000', X'0a0201ff' ); INSERT INTO traffic_selectors ( type, start_addr, end_addr ) VALUES ( 7, X'0a020200', X'0a0203ff' ); INSERT INTO child_config_traffic_selector ( child_cfg, traffic_selector, kind ) VALUES ( 1, 1, 1 ); INSERT INTO child_config_traffic_selector ( child_cfg, traffic_selector, kind ) VALUES ( 1, 4, 0 ); INSERT INTO child_config_traffic_selector ( child_cfg, traffic_selector, kind ) VALUES ( 2, 2, 1 ); INSERT INTO child_config_traffic_selector ( child_cfg, traffic_selector, kind ) VALUES ( 2, 4, 0 ); INSERT INTO child_config_traffic_selector ( child_cfg, traffic_selector, kind ) VALUES ( 3, 3, 1 ); INSERT INTO child_config_traffic_selector ( child_cfg, traffic_selector, kind ) VALUES ( 3, 5, 0 );