# left=local, right=remote

config setup
	logfile=/tmp/pluto.log
	logtime=no
	logappend=no
	plutodebug=all
	protostack=netkey

conn road-chain-B
	ikev2=no
	also=nss-cert-chain
	leftid=@west_chain_endcert.testing.libreswan.org
	leftcert=west_chain_endcert

conn nss-cert-chain
	left=192.1.2.45
	leftsubnet=192.0.1.254/32
	leftnexthop=192.1.2.23
	leftsourceip=192.0.1.254
	right=192.1.2.23
	rightid=@east.testing.libreswan.org
	rightca="C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=Libreswan test CA for mainca, E=testing@libreswan.org"
	rightsubnet=192.0.2.254/32
	# test specific options
	sendca=all