testing: Fix IKE proposal in swanctl/net2net-gw scenario

Also simplify config by using references.
2018-06-28 18:46:42 +02:00
parent 187a01cc9f
commit 1ecac75f37
1 changed files with 4 additions and 15 deletions
@@ -11,7 +11,7 @@ connections {
         id = moon.strongswan.org
      }
      children {
-         net-moon {
+         net {
            local_ts  = 10.2.0.0/16
            remote_ts = 10.1.0.0/16

@@ -23,27 +23,16 @@ connections {
      mobike = no
      proposals = aes128-sha256-x25519
   }
-   gw-sun {
-      local {
-         auth = pubkey
-         certs = carolCert.pem
-         id = [email protected]
-      }
+
+   gw-sun : connections.gw-moon {
      remote {
-         auth = pubkey
         id = sun.strongswan.org
      }
      children {
-         net-sun {
+         net {
            local_ts  = 10.1.0.0/16
            remote_ts = 10.2.0.0/16
-
-            updown = /usr/local/libexec/ipsec/_updown iptables
-            esp_proposals = aes128gcm128-modp3072
         }
      }
-      version = 2
-      mobike = no
-      proposals = aes128-sha256-modp3072
   }
 }