testing: Rename public keys in DNSSEC scenarios
We will generate PEM-encoded public keys with the script.
This commit is contained in:
@@ -9,12 +9,12 @@ conn %default
|
||||
keyingtries=1
|
||||
keyexchange=ikev2
|
||||
mobike=no
|
||||
|
||||
|
||||
conn net-net
|
||||
left=PH_IP_MOON
|
||||
leftid=moon.strongswan.org
|
||||
leftsubnet=10.1.0.0/16
|
||||
leftsigkey=moonPub.der
|
||||
leftsigkey=moonPub.pem
|
||||
leftauth=pubkey
|
||||
leftfirewall=yes
|
||||
right=sun.strongswan.org
|
||||
|
||||
@@ -9,12 +9,12 @@ conn %default
|
||||
keyingtries=1
|
||||
keyexchange=ikev2
|
||||
mobike=no
|
||||
|
||||
|
||||
conn net-net
|
||||
left=PH_IP_SUN
|
||||
leftid=sun.strongswan.org
|
||||
leftsubnet=10.2.0.0/16
|
||||
leftsigkey=sunPub.der
|
||||
leftsigkey=sunPub.pem
|
||||
leftauth=pubkey
|
||||
leftfirewall=yes
|
||||
right=moon.strongswan.org
|
||||
|
||||
@@ -2,19 +2,19 @@
|
||||
|
||||
config setup
|
||||
|
||||
conn %default
|
||||
conn %default
|
||||
ikelifetime=60m
|
||||
keylife=20m
|
||||
rekeymargin=3m
|
||||
keyingtries=1
|
||||
keyexchange=ikev2
|
||||
|
||||
conn rw
|
||||
conn rw
|
||||
left=PH_IP_MOON
|
||||
leftsubnet=10.1.0.0/16
|
||||
leftid=moon.strongswan.org
|
||||
leftauth=pubkey
|
||||
leftsigkey=moonPub.der
|
||||
leftsigkey=moonPub.pem
|
||||
leftfirewall=yes
|
||||
right=%any
|
||||
rightauth=pubkey
|
||||
|
||||
Reference in New Issue
Block a user