hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6
[strongswan.git] / testing / tests / ipv6 / net2net-rfc3779-ikev2 / hosts / sun / etc / ipsec.conf
index f710eff..adf411d 100755 (executable)
@@ -5,6 +5,12 @@ config setup
        crlcheckinterval=180
        plutostart=no
 
+ca strongswan
+       cacert=strongswanCert.pem
+       certuribase=http://ip6-winnetou.strongswan.org/certs/rfc3779/
+       crluri=http://ip6-winnetou.strongswan.org/strongswan_rfc3779.crl
+       auto=add
+
 conn %default
        ikelifetime=60m
        keylife=20m