From f400516745aee13ee55e59623717e82619818c10 Mon Sep 17 00:00:00 2001 From: Trygve Laugstøl Date: Wed, 19 Sep 2018 19:29:18 +0200 Subject: o Adding strongswan experiment. --- .../roles/strongswan-rw/templates/swanctl.conf | 34 ++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 ansible/strongswan-experiment/roles/strongswan-rw/templates/swanctl.conf (limited to 'ansible/strongswan-experiment/roles/strongswan-rw/templates') diff --git a/ansible/strongswan-experiment/roles/strongswan-rw/templates/swanctl.conf b/ansible/strongswan-experiment/roles/strongswan-rw/templates/swanctl.conf new file mode 100644 index 0000000..90d212b --- /dev/null +++ b/ansible/strongswan-experiment/roles/strongswan-rw/templates/swanctl.conf @@ -0,0 +1,34 @@ +connections { + + home { + local_addrs = {{ strongswan_rw[inventory_hostname].local_addrs }} + remote_addrs = {{ strongswan_home_addrs }} + + local { + auth = pubkey + certs = {{ inventory_hostname }}-cert.der + id = {{ inventory_hostname }}.trygvis.io + } + remote { + auth = pubkey + id = {{ strongswan_remote_id }} + } + children { + home { + remote_ts = {{ strongswan_ts }} + +# updown = /usr/local/libexec/ipsec/_updown iptables + esp_proposals = aes128-sha256-x25519 + } + } + version = 2 + proposals = aes128-sha256-x25519 + } +} + +authorities { + strongswan { + cacert = ca-cert.der + crl_uris = http://ip6-winnetou.strongswan.org/strongswan.crl + } +} -- cgit v1.2.3