testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4         crlcheckinterval=180
   5         strictcrlpolicy=yes
   6         plutostart=no
   7
   8 ca strongswan-ca
   9         cacert=strongswanCert.pem
  10         ocspuri2=http://bob.strongswan.org:8800
  11         auto=add
  12
  13 conn %default
  14         keyexchange=ikev2
  15         ikelifetime=60m
  16         keylife=20m
  17         rekeymargin=3m
  18         keyingtries=1
  19         left=PH_IP_CAROL
  20         leftnexthop=%direct
  21         leftcert=carolCert-ocsp.pem
  22         leftid=carol@strongswan.org
  23
  24 conn home
  25         right=PH_IP_MOON
  26         rightsubnet=10.1.0.0/16
  27         rightid=@moon.strongswan.org
  28         auto=add