# ipsec.conf - strongSwan IPsec configuration file

# basic configuration

config setup
	strictcrlpolicy = no
	charondebug="ike 2, knl 2, cfg 2"

conn %default
	keyingtries=1
	keyexchange=ikev2
	ike=aes256-sha2_512-modp2048,aes256-sha1-modp1024,aes128-sha1-modp2048,blowfish256-sha2_512-modp2048
	esp=aes256-sha2_512,aes256-sha1,aes128-sha1,blowfish256-sha2_512
	authby=rsasig
	left=193.96.28.100
	leftsubnet=0.0.0.0/0
	leftcert=serverCert.pem
	leftid="OURCERT"

include /etc/ipsec.d/connections/*.conf
