testing: Converted libipsec/host2host-cert to swanctl

2017-11-10 11:49:39 +01:00
parent 3659fda1a5
commit 6922d5e56a
10 changed files with 94 additions and 51 deletions
@@ -0,0 +1,26 @@
+connections {
+
+   host-host {
+      local_addrs  = 192.168.0.1
+      remote_addrs = 192.168.0.2 
+
+      local {
+         auth = pubkey
+         certs = moonCert.pem
+         id = moon.strongswan.org
+      }
+      remote {
+         auth = pubkey
+         id = sun.strongswan.org 
+      }
+      children {
+         host-host {
+            updown = /etc/updown 
+            esp_proposals = aes128-sha256-x25519
+         }
+      }
+      version = 2
+      mobike = no
+      proposals = aes128-sha256-x25519
+   }
+}