testing: migrated openssl-ikev2/critical-extension to swanctl

This commit is contained in:
Andreas Steffen
2018-11-12 11:50:05 +01:00
parent 97493cbe17
commit e259ff3979
13 changed files with 73 additions and 18 deletions
@@ -1,9 +1,11 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
load = pem pkcs1 random nonce openssl revocation curl hmac stroke kernel-netlink socket-default updown
load = random nonce pem pkcs1 openssl revocation curl vici kernel-netlink socket-default updown
multiple_authentication = no
}
libstrongswan {
x509 {
enforce_critical = no
}
@@ -0,0 +1,26 @@
connections {
gw-gw {
local_addrs = 192.168.0.1
remote_addrs = 192.168.0.2
local {
auth = pubkey
id = moon.strongswan.org
}
remote {
auth = pubkey
id = sun.strongswan.org
}
children {
net-net {
local_ts = 10.1.0.0/16
remote_ts = 10.2.0.0/16
esp_proposals = aes128gcm128-ecp256
}
}
version = 2
mobike = no
proposals = aes128-sha256-ecp256
}
}
@@ -1,6 +1,6 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
load = pem pkcs1 random nonce openssl curl revocation hmac stroke kernel-netlink socket-default updown
load = random nonce pem pkcs1 openssl curl revocation vici kernel-netlink socket-default updown
multiple_authentication = no
}
@@ -0,0 +1,26 @@
connections {
gw-gw {
local_addrs = 192.168.0.2
remote_addrs = 192.168.0.1
local {
auth = pubkey
id = sun.strongswan.org
}
remote {
auth = pubkey
id = moon.strongswan.org
}
children {
net-net {
local_ts = 10.2.0.0/16
remote_ts = 10.1.0.0/16
esp_proposals = aes128gcm128-ecp256
}
}
version = 2
mobike = no
proposals = aes128-sha256-ecp256
}
}