testing: Configure logging via syslog in strongswan.conf

Globally configure logging in strongswan.conf.testing and replace all charondebug statements with strongswan.conf settings.
2017-11-15 17:24:04 +01:00
parent d24d26c4bc
commit ce4aebe00a
98 changed files with 269 additions and 167 deletions
@@ -1,8 +1,5 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

-config setup
-	charondebug="cfg 2, knl 3"
-
 conn %default
 	keyexchange=ikev1
 	ike=aes128-sha256-modp3072!
@@ -3,4 +3,10 @@
 charon {
  load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac stroke kernel-netlink socket-default updown
  multiple_authentication = no
+  syslog {
+    daemon {
+      cfg = 2
+      knl = 3
+    }
+  }
 }
@@ -1,8 +1,5 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

-config setup
-	charondebug="cfg 2, knl 3"
-
 conn %default
 	keyexchange=ikev1
 	ike=aes128-sha256-modp3072!
@@ -3,4 +3,10 @@
 charon {
  load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac stroke kernel-netlink socket-default updown
  multiple_authentication = no
+  syslog {
+    daemon {
+      cfg = 2
+      knl = 3
+    }
+  }
 }
@@ -1,8 +1,5 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

-config setup
-	charondebug="cfg 2, knl 2"
-
 conn %default
 	ikelifetime=60m
 	keylife=20m
@@ -3,4 +3,10 @@
 charon {
  load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac stroke kernel-netlink socket-default updown
  multiple_authentication = no
+  syslog {
+    daemon {
+      cfg = 2
+      knl = 2
+    }
+  }
 }
@@ -1,8 +1,5 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

-config setup
-	charondebug="cfg 2, knl 2"
-
 conn %default
 	ikelifetime=60m
 	keylife=20m
@@ -3,4 +3,10 @@
 charon {
  load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac stroke kernel-netlink socket-default updown
  multiple_authentication = no
+  syslog {
+    daemon {
+      cfg = 2
+      knl = 2
+    }
+  }
 }
@@ -1,8 +1,5 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

-config setup
-	charondebug="ike 4, lib 4"
-
 conn %default
 	ikelifetime=60m
 	keylife=20m
@@ -13,7 +10,7 @@ conn %default
 	esp=aes256-sha512!
 	mobike=no

-conn net-net 
+conn net-net
 	left=PH_IP_MOON
 	leftcert=moonCert.pem
 	[email protected]
@@ -6,6 +6,12 @@ charon {
  multiple_authentication = no
  send_vendor_id = yes

+  syslog {
+    daemon {
+      ike = 4
+      lib = 4
+    }
+  }
  plugins {
    ntru {
      parameter_set = optimum
@@ -1,19 +1,16 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

-config setup
-	charondebug="ike 4, lib 4"
-
 conn %default
 	ikelifetime=60m
 	keylife=20m
 	rekeymargin=3m
-        keyingtries=1
+	keyingtries=1
 	keyexchange=ikev1
 	ike=aes256-sha512-ntru256!
 	esp=aes256-sha512!
 	mobike=no

-conn net-net 
+conn net-net
 	left=PH_IP_SUN
 	leftcert=sunCert.pem
 	[email protected]
@@ -5,4 +5,10 @@ charon {

  multiple_authentication = no
  send_vendor_id = yes
+  syslog {
+    daemon {
+      ike = 4
+      lib = 4
+    }
+  }
 }
@@ -1,8 +1,5 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

-config setup
-	charondebug="job 2"
-
 conn %default
 	ikelifetime=60m
 	keylife=20m
@@ -2,4 +2,9 @@

 charon {
  load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac stroke kernel-netlink socket-default updown
+  syslog {
+    daemon {
+      job = 2
+    }
+  }
 }
@@ -1,8 +1,5 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

-config setup
-	charondebug="job 2"
-
 conn %default
 	ikelifetime=60m
 	keylife=20m
@@ -2,4 +2,9 @@

 charon {
  load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac stroke kernel-netlink socket-default updown
+  syslog {
+    daemon {
+      job = 2
+    }
+  }
 }