mirror of
https://github.com/strongswan/strongswan.git
synced 2025-10-03 00:00:24 -04:00
testing: Migrated libipsec scenarios to new default plugins
This commit is contained in:
parent
0cf08b45dd
commit
bd93dfb09b
@ -1,11 +1,11 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
|
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
|
|
||||||
|
@ -1,11 +1,11 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
|
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
|
|
||||||
|
@ -1,11 +1,11 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
|
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
|
|
||||||
|
@ -1,11 +1,11 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
|
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
|
|
||||||
|
@ -1,10 +1,10 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce des sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
}
|
}
|
||||||
|
@ -1,10 +1,10 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce des sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
}
|
}
|
||||||
|
@ -1,10 +1,10 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce pem pkcs1 x509 openssl curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 openssl curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
}
|
}
|
||||||
|
@ -1,10 +1,10 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce pem pkcs1 x509 openssl curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 openssl curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
}
|
}
|
||||||
|
@ -1,11 +1,11 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
plugins {
|
plugins {
|
||||||
kernel-libipsec {
|
kernel-libipsec {
|
||||||
|
@ -1,11 +1,11 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici ker_nel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
plugins {
|
plugins {
|
||||||
kernel-libipsec {
|
kernel-libipsec {
|
||||||
|
@ -19,7 +19,6 @@ connections {
|
|||||||
remote_ts = fec1::0/16
|
remote_ts = fec1::0/16
|
||||||
|
|
||||||
updown = /etc/updown
|
updown = /etc/updown
|
||||||
updown = /usr/local/libexec/ipsec/_updown iptables
|
|
||||||
esp_proposals = aes128gcm128-x25519
|
esp_proposals = aes128gcm128-x25519
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
@ -1,11 +1,11 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
plugins {
|
plugins {
|
||||||
kernel-libipsec {
|
kernel-libipsec {
|
||||||
|
@ -1,11 +1,11 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici ker_nel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
plugins {
|
plugins {
|
||||||
kernel-libipsec {
|
kernel-libipsec {
|
||||||
|
@ -19,7 +19,6 @@ connections {
|
|||||||
remote_ts = 10.1.0.0/16
|
remote_ts = 10.1.0.0/16
|
||||||
|
|
||||||
updown = /etc/updown
|
updown = /etc/updown
|
||||||
updown = /usr/local/libexec/ipsec/_updown iptables
|
|
||||||
esp_proposals = aes128gcm128-x25519
|
esp_proposals = aes128gcm128-x25519
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
@ -1,10 +1,10 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
}
|
}
|
||||||
|
@ -1,10 +1,10 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
}
|
}
|
||||||
|
@ -1,10 +1,10 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce pem pkcs1 revocation openssl curl vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 revocation openssl curl vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
}
|
}
|
||||||
|
@ -1,10 +1,10 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce pem pkcs1 revocation openssl curl vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 revocation openssl curl vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
}
|
}
|
||||||
|
@ -1,10 +1,10 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
}
|
}
|
||||||
|
@ -1,10 +1,10 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
swanctl {
|
swanctl {
|
||||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown
|
load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown
|
||||||
multiple_authentication = no
|
multiple_authentication = no
|
||||||
}
|
}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user