- added missing ipsec.conf ipsec.conf.5
- existing ipsec.conf won't get overwritten anymore
This commit is contained in:
@@ -8,9 +8,8 @@ exec.h invokecharon.h lex.yy.c
|
|||||||
INCLUDES = -I$(top_srcdir)/src/libfreeswan -I$(top_srcdir)/src/pluto -I$(top_srcdir)/src/whack -I$(top_srcdir)/src/stroke
|
INCLUDES = -I$(top_srcdir)/src/libfreeswan -I$(top_srcdir)/src/pluto -I$(top_srcdir)/src/whack -I$(top_srcdir)/src/stroke
|
||||||
AM_CFLAGS = -DIPSEC_DIR=\"${ipsecdir}\" -DIPSEC_CONFDIR=\"${confdir}\" -DIPSEC_PIDDIR=\"${piddir}\" -DDEBUG
|
AM_CFLAGS = -DIPSEC_DIR=\"${ipsecdir}\" -DIPSEC_CONFDIR=\"${confdir}\" -DIPSEC_PIDDIR=\"${piddir}\" -DDEBUG
|
||||||
starter_LDADD = loglite.o defs.o $(top_srcdir)/src/libfreeswan/libfreeswan.a
|
starter_LDADD = loglite.o defs.o $(top_srcdir)/src/libfreeswan/libfreeswan.a
|
||||||
EXTRA_DIST = parser.l parser.y keywords.txt
|
EXTRA_DIST = parser.l parser.y keywords.txt ipsec.conf
|
||||||
man_MANS = ipsec.conf.5
|
man_MANS = ipsec.conf.5
|
||||||
sysconf_DATA = ipsec.conf
|
|
||||||
|
|
||||||
PLUTODIR=$(top_srcdir)/src/pluto
|
PLUTODIR=$(top_srcdir)/src/pluto
|
||||||
OPENACDIR=$(top_srcdir)/src/openac
|
OPENACDIR=$(top_srcdir)/src/openac
|
||||||
@@ -32,3 +31,8 @@ loglite.o: $(OPENACDIR)/loglite.c $(PLUTODIR)/log.h
|
|||||||
|
|
||||||
defs.o: $(PLUTODIR)/defs.c $(PLUTODIR)/defs.h
|
defs.o: $(PLUTODIR)/defs.c $(PLUTODIR)/defs.h
|
||||||
$(CC) $(AM_CFLAGS) $(INCLUDES) -c -o $@ $<
|
$(CC) $(AM_CFLAGS) $(INCLUDES) -c -o $@ $<
|
||||||
|
|
||||||
|
install-exec-local :
|
||||||
|
test -e "$(sysconfdir)/ipsec.conf" || $(INSTALL) ipsec.conf $(sysconfdir)/ipsec.conf
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
@@ -0,0 +1,42 @@
|
|||||||
|
# ipsec.conf - strongSwan IPsec configuration file
|
||||||
|
|
||||||
|
# Manual: man 5 ipsec.conf
|
||||||
|
# Help: http://www.strongswan.org/docs/readme.htm
|
||||||
|
|
||||||
|
version 2.0 # conforms to second version of ipsec.conf specification
|
||||||
|
|
||||||
|
# basic configuration
|
||||||
|
|
||||||
|
config setup
|
||||||
|
# Debug-logging controls: "none" for (almost) none, "all" for lots.
|
||||||
|
# plutodebug=all
|
||||||
|
# crlcheckinterval=600
|
||||||
|
# strictcrlpolicy=yes
|
||||||
|
# cachecrls=yes
|
||||||
|
# nat_traversal=yes
|
||||||
|
# charonstart=no
|
||||||
|
# plutostart=no
|
||||||
|
|
||||||
|
# Add connections here.
|
||||||
|
|
||||||
|
# Sample VPN connections
|
||||||
|
|
||||||
|
#conn sample-self-signed
|
||||||
|
# left=%defaultroute
|
||||||
|
# leftsubnet=10.1.0.0/16
|
||||||
|
# leftcert=selfCert.der
|
||||||
|
# leftsendcert=never
|
||||||
|
# right=192.168.0.2
|
||||||
|
# rightsubnet=10.2.0.0/16
|
||||||
|
# rightcert=peerCert.der
|
||||||
|
# auto=start
|
||||||
|
|
||||||
|
#conn sample-with-ca-cert
|
||||||
|
# left=%defaultroute
|
||||||
|
# leftsubnet=10.1.0.0/16
|
||||||
|
# leftcert=myCert.pem
|
||||||
|
# right=192.168.0.2
|
||||||
|
# rightsubnet=10.2.0.0/16
|
||||||
|
# rightid="C=CH, O=Linux strongSwan CN=peer name"
|
||||||
|
# keyexchange=ikev2
|
||||||
|
# auto=start
|
||||||
File diff suppressed because it is too large
Load Diff
Reference in New Issue
Block a user