# left=local, right=remote

config setup
	logfile=/tmp/pluto.log
	logtime=no
	logappend=no
	plutodebug=all
	protostack=netkey

conn road-A
	ikev2=no
	also=nss-cert-chain
	rightca="C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=Libreswan test CA for otherca, E=testing@libreswan.org"
	rightid=@someone.testing.libreswan.org

conn road-chain-B
	ikev2=no
	also=nss-cert-chain
	rightca="C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=Libreswan test CA for mainca, E=testing@libreswan.org"
	rightid=@west_chain_endcert.testing.libreswan.org

conn nss-cert-chain
	right=%any
	rightsubnet=192.0.1.254/32
	left=192.1.2.23
	leftsourceip=192.0.2.254
	leftsubnet=192.0.2.254/32
	leftcert=east
	leftid=@east.testing.libreswan.org
	leftnexthop=192.1.2.45
	# no test specific settings