From 699c47a9be116a8afb8bd2eeb380e754686cde59 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Fri, 5 Feb 2010 20:15:00 +0100 Subject: hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6 --- testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf') diff --git a/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf b/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf index 651e17e90..155cf1d4c 100755 --- a/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf @@ -5,6 +5,12 @@ config setup crlcheckinterval=180 plutostart=no +ca strongswan + cacert=strongswanCert.pem + certuribase=http://ip6-winnetou.strongswan.org/certs/ + crluri=http://ip6-winnetou.strongswan.org/strongswan.crl + auto=add + conn %default ikelifetime=60m keylife=20m -- cgit v1.2.3