# /etc/ipsec.conf - libreswan IPsec configuration file

config setup
	# put the logs in /tmp for the UMLs, so that we can operate
	# without syslogd, which seems to break on UMLs
	logfile=/tmp/pluto.log
	dumpdir=/tmp
	plutodebug=all

conn %default
	ikev2=no
	left=%defaultroute
	authby=secret
	ike=aes128-sha1;modp1536
	esp=aes128-sha1

conn bad
	esp=null-sha1;modp1536
	auto=ignore

conn good
	right=5.6.7.8
	auto=add