testing: Script building fresh certificates

2019-05-08 14:56:48 +02:00
parent 3ee352a691
commit 8db01c6a3f
164 changed files with 2064 additions and 690 deletions
@@ -8,7 +8,7 @@ ca strongswan-ca
        ocspuri1=http://bob.strongswan.org:8800
 	ocspuri2=http://ocsp.strongswan.org:8880
 	auto=add
-			
+
 conn %default
 	keyexchange=ikev2
 	ikelifetime=60m
@@ -16,7 +16,7 @@ conn %default
 	rekeymargin=3m
 	keyingtries=1
 	left=PH_IP_CAROL
-	leftcert=carolCert-ocsp.pem
+	leftcert=carolCert.pem
 	[email protected]

 conn home
@@ -1,3 +1,3 @@
 # /etc/ipsec.secrets - strongSwan IPsec secrets file

-: RSA carolKey-ocsp.pem
+: RSA carolKey.pem
@@ -1,4 +1,2 @@
 moon::ipsec stop
 carol::ipsec stop
-carol::rm /etc/ipsec.d/certs/*
-carol::rm /etc/ipsec.d/private/*