~ubuntu-branches/ubuntu/oneiric/strongswan/oneiric

« back to all changes in this revision

Viewing changes to testing/tests/ikev2/multi-level-ca-cr-init/hosts/carol/etc/ipsec.conf

  • Committer: Bazaar Package Importer
  • Author(s): Rene Mayrhofer
  • Date: 2008-12-05 17:21:42 UTC
  • mfrom: (1.1.7 upstream)
  • Revision ID: james.westby@ubuntu.com-20081205172142-9g77wgyzcj0blq7p
* New upstream release, fixes a MOBIKE issue.
  Closes: #507542: strongswan: endless loop
* Explicitly enable compilation with libcurl for CRL fetching
  Closes: #497756: strongswan: not compiled with curl support; crl 
                   fetching not available
* Enable compilation with SSH agent support.

Show diffs side-by-side

added added

removed removed

Lines of Context:
 
1
# /etc/ipsec.conf - strongSwan IPsec configuration file
 
2
 
 
3
config setup
 
4
        crlcheckinterval=180
 
5
        strictcrlpolicy=no
 
6
        plutostart=no
 
7
 
 
8
conn %default
 
9
        ikelifetime=60m
 
10
        keylife=20m
 
11
        rekeymargin=3m
 
12
        keyingtries=1
 
13
        keyexchange=ikev2
 
14
 
 
15
conn alice
 
16
        left=PH_IP_CAROL
 
17
        leftcert=carolCert.pem
 
18
        leftid=carol@strongswan.org
 
19
        leftsendcert=ifasked
 
20
        right=PH_IP_MOON
 
21
        rightid=@moon.strongswan.org
 
22
        rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA"
 
23
        rightsubnet=PH_IP_ALICE/32
 
24
        auto=add