testing/tests/openssl-ikev1/ecdsa-certs/hosts/dave/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4
   5 conn %default
   6         ikelifetime=60m
   7         keylife=20m
   8         rekeymargin=3m
   9         keyingtries=1
  10         keyexchange=ikev1
  11         ike=aes128-sha256-ecp256!
  12         esp=aes128gcm16!
  13
  14 conn home
  15         left=PH_IP_DAVE
  16         leftcert=daveCert.pem
  17         leftid=dave@strongswan.org
  18         leftfirewall=yes
  19         right=PH_IP_MOON
  20         rightid=@moon.strongswan.org
  21         rightsubnet=10.1.0.0/16
  22         auto=add