← Back to branch summary

~ubuntu-branches/ubuntu/maverick/strongswan/maverick

« back to all changes in this revision

Viewing changes to testing/tests/pfkey/protoport-dual/hosts/moon/etc/ipsec.conf

  • Committer: Bazaar Package Importer
  • Author(s): Rene Mayrhofer
  • Date: 2008-12-05 17:21:42 UTC
  • mfrom: (1.1.7 upstream)
  • Revision ID: james.westby@ubuntu.com-20081205172142-9g77wgyzcj0blq7p
http://bugs.debian.org/507542
http://bugs.debian.org/497756
* New upstream release, fixes a MOBIKE issue.
  Closes: #507542: strongswan: endless loop
* Explicitly enable compilation with libcurl for CRL fetching
  Closes: #497756: strongswan: not compiled with curl support; crl 
                   fetching not available
* Enable compilation with SSH agent support.

Show diffs side-by-side

added added

removed removed

Lines of Context:
testing/tests/pfkey/protoport-dual/hosts/moon/etc/ipsec.conf
 
1
# /etc/ipsec.conf - strongSwan IPsec configuration file
 
2
 
 
3
config setup
 
4
        crlcheckinterval=180
 
5
        strictcrlpolicy=no
 
6
        plutostart=no
 
7
 
 
8
conn %default
 
9
        ikelifetime=60m
 
10
        keylife=20m
 
11
        rekeymargin=3m
 
12
        keyingtries=1
 
13
        keyexchange=ikev2
 
14
        left=PH_IP_MOON
 
15
        leftcert=moonCert.pem
 
16
        leftid=@moon.strongswan.org
 
17
        leftfirewall=yes
 
18
        leftsubnet=10.1.0.0/16
 
19
        right=%any
 
20
        auto=add
 
21
 
 
22
conn rw-icmp
 
23
        lefthostaccess=yes
 
24
        leftprotoport=icmp
 
25
        rightprotoport=icmp
 
26
 
 
27
conn rw-ssh
 
28
        leftprotoport=tcp/ssh
 
29
        rightprotoport=tcp