← Back to branch summary

~ubuntu-branches/ubuntu/hardy/openswan/hardy-updates

« back to all changes in this revision

Viewing changes to testing/pluto/x509-pluto-08/west.conf

  • Committer: Bazaar Package Importer
  • Author(s): Rene Mayrhofer
  • Date: 2005-01-27 16:10:11 UTC
  • mfrom: (1.1.1 upstream)
  • Revision ID: james.westby@ubuntu.com-20050127161011-idgybmyz3vwhpfiq
Tags: 2.3.0-2
http://bugs.debian.org/292458
http://bugs.debian.org/291143
Urgency HIGH due to security issue and problems with build-deps in sarge.
* Fix the security issue. Please see
  http://www.idefense.com/application/poi/display?id=190&
      type=vulnerabilities&flashstatus=false
  for more details. Thanks to Martin Schulze for informing me about
  this issue.
  Closes: #292458: Openswan XAUTH/PAM Buffer Overflow Vulnerability
* Added a Build-Dependency to lynx.
  Closes: #291143: openswan: FTBFS: Missing build dependency.

Show diffs side-by-side

added added

removed removed

Lines of Context:
testing/pluto/x509-pluto-08/west.conf
 
1
# /etc/ipsec.conf - FreeS/WAN IPsec configuration file
 
2
 
 
3
version 2.0
 
4
 
 
5
config setup
 
6
        # put the logs in /tmp for the UMLs, so that we can operate
 
7
        # without syslogd, which seems to break on UMLs
 
8
        plutostderrlog=/tmp/pluto.log
 
9
        plutorestartoncrash=false
 
10
        dumpdir=/var/tmp
 
11
 
 
12
conn    westnet-eastnet-x509-cr
 
13
        rightca="C=CA, ST=Ontario, O=Openswan, CN=ca.openswan.org, E=ca@openswan.org"
 
14
        leftsendcert=forced
 
15
        leftcerttype=0x04
 
16
        leftcert=/testing/pluto/x509-pluto-08/westcert.der
 
17
        leftsubnet=192.0.1.0/24
 
18
        rightsubnet=192.0.2.0/24
 
19
        # Left security gateway, subnet behind it, next hop toward right.
 
20
        left=192.1.2.45
 
21
        leftrsasigkey=%cert
 
22
        leftnexthop=192.1.2.23
 
23
        leftid="C=CA, ST=Ontario, O=Openswan, L=Toronto, CN=west.uml.freeswan.org, E=west@openswan.org"
 
24
        # Right security gateway, subnet behind it, next hop toward left.
 
25
        right=192.1.2.23
 
26
        rightid="C=CA, ST=Ontario, O=Openswan, L=Toronto, CN=east.uml.openswan.org, E=east@openswan.org"
 
27
        rightrsasigkey=%cert
 
28
        rightcert=east.uml.freeswan.org.cert
 
29
        rightnexthop=192.1.2.45
 
30
 
 
31
 
 
32
include /etc/ipsec.d/ipsec.conf.common
 
33