testing: Migrated ikev2 scenarios to new default plugins
This commit is contained in:
committed by
Tobias Brunner
parent
9de4efb1ae
commit
2099a52618
@@ -1,5 +1,7 @@
|
||||
A connection between the subnets behind the gateways <b>moon</b> and <b>sun</b> is set up.
|
||||
The authentication is based on <b>X.509 certificates</b>.
|
||||
The authentication is based on an RSA private key, a matching X.509 end entity
|
||||
certificate and the issuing X.509 root CA certificate, all stored in a <b>PKCS12</b>
|
||||
container.
|
||||
<p/>
|
||||
Upon the successful establishment of the IPsec tunnel, the updown script automatically
|
||||
inserts iptables-based firewall rules that let pass the tunneled traffic.
|
||||
|
||||
@@ -1,9 +1,9 @@
|
||||
# /etc/strongswan.conf - strongSwan configuration file
|
||||
|
||||
swanctl {
|
||||
load = random aes sha1 sha2 hmac kdf pem pkcs1 pkcs7 pkcs8 pkcs12 gmp x509 revocation constraints
|
||||
load = random pem pkcs1 openssl revocation constraints
|
||||
}
|
||||
|
||||
charon-systemd {
|
||||
load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 gmp x509 revocation curve25519 curl kernel-netlink socket-default updown vici
|
||||
load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici
|
||||
}
|
||||
|
||||
@@ -1,9 +1,9 @@
|
||||
# /etc/strongswan.conf - strongSwan configuration file
|
||||
|
||||
swanctl {
|
||||
load = random aes sha1 sha2 hmac kdf pem pkcs1 pkcs7 pkcs8 pkcs12 gmp x509 revocation constraints
|
||||
load = random pem pkcs1 openssl revocation constraints
|
||||
}
|
||||
|
||||
charon-systemd {
|
||||
load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 gmp x509 revocation curve25519 curl kernel-netlink socket-default updown vici
|
||||
load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user