- applied andreas's patch

- logger output improvements
  - testin gupdates
  - and a lot more
This commit is contained in:
Martin Willi
2006-05-18 06:02:28 +00:00
parent 1e93135408
commit b5e1560659
151 changed files with 348 additions and 203 deletions
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,7 +6,8 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
keylife=20m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=yes
cachecrls=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=yes
cachecrls=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=yes
cachecrls=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=yes
cachecrls=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
cachecrls=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
cachecrls=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=0
strictcrlpolicy=no
nocrsend=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=0
strictcrlpolicy=no
nocrsend=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -15,7 +16,7 @@ conn %default
keyingtries=1
conn carol
left=192.168.0.1
left=PH_IP_MOON
leftnexthop=%direct
leftcert=selfCert.der
leftsendcert=never
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=no
nat_traversal=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=no
nat_traversal=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=no
nat_traversal=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=no
nat_traversal=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
+1 -1
View File
@@ -1,5 +1,5 @@
A connection between the subnets behind the gateways <b>moon</b> and <b>sun</b>
is set up using the IKEv2 key exchange protocol. The authentication is based on
locally importerd <b>X.509 certificates</b>.
locally imported <b>X.509 certificates</b>.
In order to test the established tunnel, client <b>alice</b> behind gateway <b>moon</b>
pings client <b>bob</b> located behind gateway <b>sun</b>.
@@ -6,10 +6,10 @@ config setup
plutostart=no
conn net-net
left=192.168.0.1
left=PH_IP_MOON
leftcert=moonCert.pem
leftsubnet=10.1.0.0/16
right=192.168.0.2
right=PH_IP_SUN
rightcert=sunCert.pem
rightsubnet=10.2.0.0/16
keyexchange=ikev2
@@ -6,10 +6,10 @@ config setup
plutostart=no
conn net-net
left=192.168.0.2
left=PH_IP_SUN
leftcert=sunCert.pem
leftsubnet=10.2.0.0/16
right=192.168.0.1
right=PH_IP_MOON
rightcert=moonCert.pem
rightsubnet=10.1.0.0/16
keyexchange=ikev2
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -5,6 +5,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
nocrsend=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -5,6 +5,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
nocrsend=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m

Some files were not shown because too many files have changed in this diff Show More