# /etc/ipsec.conf - libreswan IPsec configuration file

config setup
	# put the logs in /tmp for the UMLs, so that we can operate
	# without syslogd, which seems to break on UMLs
	plutostderrlog=/tmp/pluto.log
	dumpdir=/tmp
	protostack=netkey
	plutodebug=all

conn %default
	ikev2=no
	left=%defaultroute
	authby=secret
	ike=aes128-sha1;modp1024
	phase2alg=aes128-sha1

conn bad
	phase2alg=null-sha1;modp1024
	auto=ignore

conn good
	right=5.6.7.8
	auto=add