- added missing ipsec.conf ipsec.conf.5
- existing ipsec.conf won't get overwritten anymore
This commit is contained in:
@@ -8,9 +8,8 @@ exec.h invokecharon.h lex.yy.c
|
||||
INCLUDES = -I$(top_srcdir)/src/libfreeswan -I$(top_srcdir)/src/pluto -I$(top_srcdir)/src/whack -I$(top_srcdir)/src/stroke
|
||||
AM_CFLAGS = -DIPSEC_DIR=\"${ipsecdir}\" -DIPSEC_CONFDIR=\"${confdir}\" -DIPSEC_PIDDIR=\"${piddir}\" -DDEBUG
|
||||
starter_LDADD = loglite.o defs.o $(top_srcdir)/src/libfreeswan/libfreeswan.a
|
||||
EXTRA_DIST = parser.l parser.y keywords.txt
|
||||
EXTRA_DIST = parser.l parser.y keywords.txt ipsec.conf
|
||||
man_MANS = ipsec.conf.5
|
||||
sysconf_DATA = ipsec.conf
|
||||
|
||||
PLUTODIR=$(top_srcdir)/src/pluto
|
||||
OPENACDIR=$(top_srcdir)/src/openac
|
||||
@@ -32,3 +31,8 @@ loglite.o: $(OPENACDIR)/loglite.c $(PLUTODIR)/log.h
|
||||
|
||||
defs.o: $(PLUTODIR)/defs.c $(PLUTODIR)/defs.h
|
||||
$(CC) $(AM_CFLAGS) $(INCLUDES) -c -o $@ $<
|
||||
|
||||
install-exec-local :
|
||||
test -e "$(sysconfdir)/ipsec.conf" || $(INSTALL) ipsec.conf $(sysconfdir)/ipsec.conf
|
||||
|
||||
|
||||
|
||||
@@ -0,0 +1,42 @@
|
||||
# ipsec.conf - strongSwan IPsec configuration file
|
||||
|
||||
# Manual: man 5 ipsec.conf
|
||||
# Help: http://www.strongswan.org/docs/readme.htm
|
||||
|
||||
version 2.0 # conforms to second version of ipsec.conf specification
|
||||
|
||||
# basic configuration
|
||||
|
||||
config setup
|
||||
# Debug-logging controls: "none" for (almost) none, "all" for lots.
|
||||
# plutodebug=all
|
||||
# crlcheckinterval=600
|
||||
# strictcrlpolicy=yes
|
||||
# cachecrls=yes
|
||||
# nat_traversal=yes
|
||||
# charonstart=no
|
||||
# plutostart=no
|
||||
|
||||
# Add connections here.
|
||||
|
||||
# Sample VPN connections
|
||||
|
||||
#conn sample-self-signed
|
||||
# left=%defaultroute
|
||||
# leftsubnet=10.1.0.0/16
|
||||
# leftcert=selfCert.der
|
||||
# leftsendcert=never
|
||||
# right=192.168.0.2
|
||||
# rightsubnet=10.2.0.0/16
|
||||
# rightcert=peerCert.der
|
||||
# auto=start
|
||||
|
||||
#conn sample-with-ca-cert
|
||||
# left=%defaultroute
|
||||
# leftsubnet=10.1.0.0/16
|
||||
# leftcert=myCert.pem
|
||||
# right=192.168.0.2
|
||||
# rightsubnet=10.2.0.0/16
|
||||
# rightid="C=CH, O=Linux strongSwan CN=peer name"
|
||||
# keyexchange=ikev2
|
||||
# auto=start
|
||||
File diff suppressed because it is too large
Load Diff
Reference in New Issue
Block a user