Added ikev2/net2net-ntru-cert and ikev2/rw-ntru-psk scenarios

2013-11-27 20:21:40 +01:00
parent 146ad86be5
commit d5cd6eba2b
23 changed files with 284 additions and 0 deletions
@@ -0,0 +1,23 @@
+# /etc/ipsec.conf - strongSwan IPsec configuration file
+
+config setup
+
+conn %default
+	ikelifetime=60m
+	keylife=20m
+	rekeymargin=3m
+	keyingtries=1
+	keyexchange=ikev2
+	ike=aes128-sha256-ntru128!
+	esp=aes128-sha256!
+	authby=psk
+
+conn home
+	left=PH_IP_CAROL
+	leftsourceip=%config
+	[email protected]
+	leftfirewall=yes
+	right=PH_IP_MOON
+	rightsubnet=10.1.0.0/16
+	rightid=moon.strongswan.org
+	auto=add
@@ -0,0 +1,3 @@
+# /etc/ipsec.secrets - strongSwan IPsec secrets file
+
+moon.strongswan.org [email protected] : PSK 0sC0qhnO9/1MWf6tNvCz6mY6pFiDzkVsNlDxZ+9eUjiwwzhHO5UIvgMcvCGcKY/720
@@ -0,0 +1,6 @@
+# /etc/strongswan.conf - strongSwan configuration file
+
+charon {
+  load = aes sha1 sha2 random nonce ntru hmac stroke kernel-netlink socket-default updown
+  send_vendor_id = yes
+}