testing: Added ikev2/rw-newhope-bliss scenario

2016-08-10 14:22:00 +02:00
parent 1342bd3386
commit 277ef8c2fa
24 changed files with 195 additions and 1 deletions
@@ -0,0 +1,26 @@
+# /etc/ipsec.conf - strongSwan IPsec configuration file
+
+config setup
+	strictcrlpolicy=yes
+
+conn %default
+	ikelifetime=60m
+	keylife=20m
+	rekeymargin=3m
+	keyingtries=1
+	keyexchange=ikev2
+	ike=aes256-sha256-newhope128!
+	esp=aes256-sha256!
+	authby=pubkey
+	fragmentation=yes
+
+conn rw
+	left=PH_IP_MOON
+	leftsubnet=10.1.0.0/16
+	leftcert=moonCert.der
+	leftauth=bliss-sha512
+	leftid=moon.strongswan.org
+	leftfirewall=yes
+	right=%any
+	rightsourceip=10.3.0.0/28
+	auto=add