Cleaned configuration files in PT-TLS client scenario

2013-08-22 17:24:20 +02:00
parent d7ae0b254d
commit 03d673620d
11 changed files with 13 additions and 127 deletions
@@ -1,23 +1,3 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

-config setup
-	charondebug="tnc 3, imc 3"
-
-conn %default
-	ikelifetime=60m
-	keylife=20m
-	rekeymargin=3m
-	keyingtries=1
-	keyexchange=ikev2
-
-conn home
-	left=PH_IP_CAROL
-	leftauth=eap
-	leftfirewall=yes
-	right=PH_IP_MOON
-	[email protected]
-	rightsubnet=10.1.0.0/16
-	rightauth=pubkey
-	eap_identity=carol
-	aaa_identity="C=CH, O=Linux strongSwan, CN=aaa.strongswan.org"
-	auto=add
+# the PT-TLS client reads its configuration via the command line
@@ -1,3 +1,3 @@
 # /etc/ipsec.secrets - strongSwan IPsec secrets file

-carol : EAP "Ar3etTnp"
+# the PT-TLS client loads its secrets via the command line
@@ -0,0 +1,4 @@
+/* strongSwan SQLite database */
+
+/* configuration is read from the command line */
+/* credentials are read from the command line */