upgraded ipv6 scenarios to 5.0.0

2012-05-29 23:40:01 +02:00
parent 53915f14ae
commit 08951eb7a8
121 changed files with 737 additions and 282 deletions
@@ -1,10 +1,13 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

 config setup
-	strictcrlpolicy=no
-	crlcheckinterval=180
-	charonstart=no
-	plutodebug=control
+	plutostart=no
+
+ca strongswan
+	cacert=strongswanCert.pem
+	certuribase=http://ip6-winnetou.strongswan.org/certs/
+	crluri=http://ip6-winnetou.org/strongswan.crl
+	auto=add

 conn %default
 	ikelifetime=60m
@@ -12,7 +15,6 @@ conn %default
 	rekeymargin=3m
 	keyingtries=1
 	keyexchange=ikev1
-	mobike=no

 conn net-net
 	also=host-host
@@ -23,6 +25,7 @@ conn host-host
 	left=PH_IP6_SUN
 	leftcert=sunCert.pem
 	[email protected]
+	leftfirewall=yes
 	right=PH_IP6_MOON
 	[email protected]
 	auto=add