mirror of
https://github.com/strongswan/strongswan.git
synced 2025-10-08 00:02:03 -04:00
8484f2bc5c
Two transport connections to gateway sun are set up, one from client carol and the other from client dave. The gateway sun uses the Trusted Key Manager (TKM) and is the responder for both connections. The authentication is based on X.509 certificates. In order to test the connections, both carol and dave ping gateway sun.
15 lines
617 B
Plaintext
15 lines
617 B
Plaintext
sun::rm /etc/ipsec.secrets
|
|
sun::tkm_cfgtool -c /etc/tkm/tkm.conf -i /etc/ipsec.conf -t /etc/tkm/tkm.bin -s /usr/local/share/tkm/tkmconfig.xsd
|
|
sun::cat /etc/ipsec.conf
|
|
sun::tkm_keymanager -c /etc/tkm/tkm.bin -k /etc/tkm/sunKey.der -r /etc/tkm/strongswanCert.der >/tmp/tkm.log 2>&1 &
|
|
sun::expect-file /tmp/tkm.rpc.ike
|
|
sun::DAEMON_NAME=charon-tkm ipsec start
|
|
carol::ipsec start
|
|
carol::expect-connection host-host
|
|
dave::ipsec start
|
|
dave::expect-connection host-host
|
|
sun::DAEMON_NAME=charon-tkm expect-connection conn1
|
|
sun::DAEMON_NAME=charon-tkm expect-connection conn2
|
|
carol::ipsec up host-host
|
|
dave::ipsec up host-host
|