aboutsummaryrefslogtreecommitdiffstats
path: root/testing/tests/ikev1-c-p/xauth-psk/hosts/moon/etc
diff options
context:
space:
mode:
Diffstat (limited to 'testing/tests/ikev1-c-p/xauth-psk/hosts/moon/etc')
-rw-r--r--testing/tests/ikev1-c-p/xauth-psk/hosts/moon/etc/ipsec.conf25
-rw-r--r--testing/tests/ikev1-c-p/xauth-psk/hosts/moon/etc/ipsec.secrets7
-rw-r--r--testing/tests/ikev1-c-p/xauth-psk/hosts/moon/etc/strongswan.conf11
3 files changed, 43 insertions, 0 deletions
diff --git a/testing/tests/ikev1-c-p/xauth-psk/hosts/moon/etc/ipsec.conf b/testing/tests/ikev1-c-p/xauth-psk/hosts/moon/etc/ipsec.conf
new file mode 100644
index 000000000..30c55d216
--- /dev/null
+++ b/testing/tests/ikev1-c-p/xauth-psk/hosts/moon/etc/ipsec.conf
@@ -0,0 +1,25 @@
+# /etc/ipsec.conf - strongSwan IPsec configuration file
+
+config setup
+ plutodebug=control
+ crlcheckinterval=180
+ strictcrlpolicy=no
+ charonstart=no
+
+conn %default
+ ikelifetime=60m
+ keylife=20m
+ rekeymargin=3m
+ keyingtries=1
+ keyexchange=ikev1
+ authby=xauthpsk
+ xauth=server
+ pfs=no
+
+conn rw
+ left=PH_IP_MOON
+ leftid=moon.strongswan.org
+ leftsubnet=10.1.0.0/16
+ leftfirewall=yes
+ right=%any
+ auto=add
diff --git a/testing/tests/ikev1-c-p/xauth-psk/hosts/moon/etc/ipsec.secrets b/testing/tests/ikev1-c-p/xauth-psk/hosts/moon/etc/ipsec.secrets
new file mode 100644
index 000000000..ae45ea03e
--- /dev/null
+++ b/testing/tests/ikev1-c-p/xauth-psk/hosts/moon/etc/ipsec.secrets
@@ -0,0 +1,7 @@
+# /etc/ipsec.secrets - strongSwan IPsec secrets file
+
+moon.strongswan.org %any : PSK 0sv+NkxY9LLZvwj4qCC2o/gGrWDF2d21jL
+
+carol@strongswan.org : XAUTH "4iChxLT3"
+
+dave@strongswan.org : XAUTH "ryftzG4A"
diff --git a/testing/tests/ikev1-c-p/xauth-psk/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-c-p/xauth-psk/hosts/moon/etc/strongswan.conf
new file mode 100644
index 000000000..58cc78ee8
--- /dev/null
+++ b/testing/tests/ikev1-c-p/xauth-psk/hosts/moon/etc/strongswan.conf
@@ -0,0 +1,11 @@
+# /etc/strongswan.conf - strongSwan configuration file
+
+pluto {
+ load = sha1 sha2 md5 aes des hmac gmp random nonce xauth kernel-netlink
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+ dh_exponent_ansi_x9_42 = no
+}