testing: Rename public keys in DNSSEC scenarios
We will generate PEM-encoded public keys with the script.
This commit is contained in:
@@ -9,12 +9,12 @@ conn %default
|
|||||||
keyingtries=1
|
keyingtries=1
|
||||||
keyexchange=ikev2
|
keyexchange=ikev2
|
||||||
mobike=no
|
mobike=no
|
||||||
|
|
||||||
conn net-net
|
conn net-net
|
||||||
left=PH_IP_MOON
|
left=PH_IP_MOON
|
||||||
leftid=moon.strongswan.org
|
leftid=moon.strongswan.org
|
||||||
leftsubnet=10.1.0.0/16
|
leftsubnet=10.1.0.0/16
|
||||||
leftsigkey=moonPub.der
|
leftsigkey=moonPub.pem
|
||||||
leftauth=pubkey
|
leftauth=pubkey
|
||||||
leftfirewall=yes
|
leftfirewall=yes
|
||||||
right=sun.strongswan.org
|
right=sun.strongswan.org
|
||||||
|
|||||||
@@ -9,12 +9,12 @@ conn %default
|
|||||||
keyingtries=1
|
keyingtries=1
|
||||||
keyexchange=ikev2
|
keyexchange=ikev2
|
||||||
mobike=no
|
mobike=no
|
||||||
|
|
||||||
conn net-net
|
conn net-net
|
||||||
left=PH_IP_SUN
|
left=PH_IP_SUN
|
||||||
leftid=sun.strongswan.org
|
leftid=sun.strongswan.org
|
||||||
leftsubnet=10.2.0.0/16
|
leftsubnet=10.2.0.0/16
|
||||||
leftsigkey=sunPub.der
|
leftsigkey=sunPub.pem
|
||||||
leftauth=pubkey
|
leftauth=pubkey
|
||||||
leftfirewall=yes
|
leftfirewall=yes
|
||||||
right=moon.strongswan.org
|
right=moon.strongswan.org
|
||||||
|
|||||||
@@ -2,19 +2,19 @@
|
|||||||
|
|
||||||
config setup
|
config setup
|
||||||
|
|
||||||
conn %default
|
conn %default
|
||||||
ikelifetime=60m
|
ikelifetime=60m
|
||||||
keylife=20m
|
keylife=20m
|
||||||
rekeymargin=3m
|
rekeymargin=3m
|
||||||
keyingtries=1
|
keyingtries=1
|
||||||
keyexchange=ikev2
|
keyexchange=ikev2
|
||||||
|
|
||||||
conn rw
|
conn rw
|
||||||
left=PH_IP_MOON
|
left=PH_IP_MOON
|
||||||
leftsubnet=10.1.0.0/16
|
leftsubnet=10.1.0.0/16
|
||||||
leftid=moon.strongswan.org
|
leftid=moon.strongswan.org
|
||||||
leftauth=pubkey
|
leftauth=pubkey
|
||||||
leftsigkey=moonPub.der
|
leftsigkey=moonPub.pem
|
||||||
leftfirewall=yes
|
leftfirewall=yes
|
||||||
right=%any
|
right=%any
|
||||||
rightauth=pubkey
|
rightauth=pubkey
|
||||||
|
|||||||
@@ -2,13 +2,13 @@ connections {
|
|||||||
|
|
||||||
home {
|
home {
|
||||||
local_addrs = 192.168.0.100
|
local_addrs = 192.168.0.100
|
||||||
remote_addrs = 192.168.0.1
|
remote_addrs = 192.168.0.1
|
||||||
vips = 0.0.0.0
|
vips = 0.0.0.0
|
||||||
|
|
||||||
local {
|
local {
|
||||||
auth = pubkey
|
auth = pubkey
|
||||||
id = carol.strongswan.org
|
id = carol.strongswan.org
|
||||||
pubkeys = carolPub.der
|
pubkeys = carolPub.pem
|
||||||
}
|
}
|
||||||
remote {
|
remote {
|
||||||
auth = pubkey
|
auth = pubkey
|
||||||
@@ -16,7 +16,7 @@ connections {
|
|||||||
}
|
}
|
||||||
children {
|
children {
|
||||||
home {
|
home {
|
||||||
remote_ts = 10.1.0.0/16
|
remote_ts = 10.1.0.0/16
|
||||||
|
|
||||||
updown = /usr/local/libexec/ipsec/_updown iptables
|
updown = /usr/local/libexec/ipsec/_updown iptables
|
||||||
esp_proposals = aes128gcm128-x25519
|
esp_proposals = aes128gcm128-x25519
|
||||||
|
|||||||
@@ -2,13 +2,13 @@ connections {
|
|||||||
|
|
||||||
home {
|
home {
|
||||||
local_addrs = 192.168.0.200
|
local_addrs = 192.168.0.200
|
||||||
remote_addrs = 192.168.0.1
|
remote_addrs = 192.168.0.1
|
||||||
vips = 0.0.0.0
|
vips = 0.0.0.0
|
||||||
|
|
||||||
local {
|
local {
|
||||||
auth = pubkey
|
auth = pubkey
|
||||||
id = dave.strongswan.org
|
id = dave.strongswan.org
|
||||||
pubkeys = davePub.der
|
pubkeys = davePub.pem
|
||||||
}
|
}
|
||||||
remote {
|
remote {
|
||||||
auth = pubkey
|
auth = pubkey
|
||||||
@@ -16,7 +16,7 @@ connections {
|
|||||||
}
|
}
|
||||||
children {
|
children {
|
||||||
home {
|
home {
|
||||||
remote_ts = 10.1.0.0/16
|
remote_ts = 10.1.0.0/16
|
||||||
|
|
||||||
updown = /usr/local/libexec/ipsec/_updown iptables
|
updown = /usr/local/libexec/ipsec/_updown iptables
|
||||||
esp_proposals = aes128gcm128-x25519
|
esp_proposals = aes128gcm128-x25519
|
||||||
|
|||||||
@@ -7,14 +7,14 @@ connections {
|
|||||||
local {
|
local {
|
||||||
auth = pubkey
|
auth = pubkey
|
||||||
id = moon.strongswan.org
|
id = moon.strongswan.org
|
||||||
pubkeys = moonPub.der
|
pubkeys = moonPub.pem
|
||||||
}
|
}
|
||||||
remote {
|
remote {
|
||||||
auth = pubkey
|
auth = pubkey
|
||||||
}
|
}
|
||||||
children {
|
children {
|
||||||
net {
|
net {
|
||||||
local_ts = 10.1.0.0/16
|
local_ts = 10.1.0.0/16
|
||||||
|
|
||||||
updown = /usr/local/libexec/ipsec/_updown iptables
|
updown = /usr/local/libexec/ipsec/_updown iptables
|
||||||
esp_proposals = aes128gcm128-x25519
|
esp_proposals = aes128gcm128-x25519
|
||||||
|
|||||||
Reference in New Issue
Block a user