testing/tests/ikev2/multi-level-ca-loop/hosts/moon/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4         crlcheckinterval=180
   5         strictcrlpolicy=yes
   6         plutostart=no
   7
   8 conn %default
   9         ikelifetime=60m
  10         keylife=20m
  11         rekeymargin=3m
  12         keyingtries=1
  13         keyexchange=ikev2
  14         left=PH_IP_MOON
  15         leftnexthop=%direct
  16         leftcert=moonCert.pem
  17         leftid=@moon.strongswan.org
  18
  19 conn alice
  20         leftsubnet=PH_IP_ALICE/32
  21         right=%any
  22         rightca="C=CH, O=Linux strongSwan, OU=Research, CN=Research CA"
  23         auto=add