Attachment 152320 Details for Bug 235475 – Attached contents of my racoon.conf, psk.txt, and ipsec policy for labeled ipsec over loopback

Attached contents of my racoon.conf, psk.txt, and ipsec policy for labeled ipsec over loopback

racoon.setup (text/plain), 1.76 KB, created by Joy Latten on 2007-04-11 19:50:12 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Joy Latten

Created: 2007-04-11 19:50:12 UTC

Size: 1.76 KB

patch

obsolete

>
>Contents of /etc/racoon/racoon.conf:
>-----------------------------------
>
># Racoon IKE daemon configuration file.
># See 'man racoon.conf' for a description of the format and entries.
>
>path include "/etc/racoon";
>path pre_shared_key "/etc/racoon/psk.txt";
>path certificate "/etc/racoon/certs";
>
>remote anonymous
>{
>        exchange_mode main,aggressive;
>        doi ipsec_doi;
>        situation identity_only;
>
>        my_identifier address;
>
>        lifetime time 1 hour ;   # sec,min,hour
>        initial_contact on;
>        proposal_check obey;    # obey, strict or claim
>
>
>        proposal {
>                encryption_algorithm 3des;
>                hash_algorithm sha1;
>                authentication_method pre_shared_key ;
>                dh_group 2 ;
>        }
>}
>
>sainfo anonymous
>{
>	pfs_group 2;
>	lifetime time 30 minutes ;
>	encryption_algorithm 3des, blowfish 448, rijndael ;
>	authentication_algorithm hmac_sha1, hmac_md5 ;
>	compression_algorithm deflate ;
>}
>
>
>-------------------------------------------------------------------------
>
>Labeled IPSec Policy
>--------------------
>
>spdadd 127.0.0.1 127.0.0.1 any
>-ctx 1 1 "system_u:object_r:ipsec_spd_t:s0-s15:c0.c1023"
>-P out ipsec
>esp/transport//require;
>
>spdadd 127.0.0.1 127.0.0.1 any
>-ctx 1 1 "system_u:object_r:ipsec_spd_t:s0-s15:c0.c1023"
>-P in ipsec
>esp/transport//require;
>
>----------------------------------------------------------------------------
>
>contents of /etc/racoon/psk.txt file since I am using pre-shared keys:
>----------------------------------------------------------------------
>
># file for pre-shared keys used for IKE authentication
># format is:  'identifier' 'key'
># For example:
>#
>#  10.1.1.1		flibbertigibbet
>#  www.example.com      12345
>#  foo@www.example.com  micropachycephalosaurus
>127.0.0.1			flibbertigibbet

Actions: View

Attachments on bug 235475: 151821 | 151825 | 151880 | 152078 | 152084 | 152194 | 152196 | 152289 | 152320 | 152503 | 152618