renamed ocsp-timeouts to ocsp-timeouts-good
[strongswan.git] / testing / tests / ikev2 / ocsp-timeouts-good / hosts / carol / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4         crlcheckinterval=180
5         strictcrlpolicy=yes
6         plutostart=no
7
8 ca strongswan-ca
9         cacert=strongswanCert.pem
10         ocspuri2=http://bob.strongswan.org:8800
11         auto=add
12                         
13 conn %default
14         keyexchange=ikev2
15         ikelifetime=60m
16         keylife=20m
17         rekeymargin=3m
18         keyingtries=1
19         left=PH_IP_CAROL
20         leftnexthop=%direct
21         leftcert=carolCert-ocsp.pem
22         leftid=carol@strongswan.org
23
24 conn home
25         right=PH_IP_MOON
26         rightsubnet=10.1.0.0/16
27         rightid=@moon.strongswan.org
28         auto=add