# /etc/ipsec.conf - Libreswan IPsec configuration file

version 2.0

config setup
	# put the logs in /tmp for the UMLs, so that we can operate
	# without syslogd, which seems to break on UMLs
	plutostderrlog=/tmp/pluto.log
	plutorestartoncrash=false
	dumpdir=/tmp
	protostack=netkey

include	/testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common

conn loopback-03-westleft
	auto=route
	rekey=no
	authby=secret
	type=transport
	left=127.0.0.1
	right=127.0.0.1
	loopback=yes
	leftprotoport=tcp/4300
	rightprotoport=tcp
	labeled_ipsec=yes
	policy_label=system_u:object_r:ipsec_spd_t:s0-s15:c0.c1023
        esp=3des-md5

conn loopback-03-westright
	auto=route
	rekey=no
	authby=secret
	type=transport
	left=127.0.0.1
	right=127.0.0.1
	loopback=yes
	leftprotoport=tcp
	rightprotoport=tcp/4300
	labeled_ipsec=yes
	policy_label=system_u:object_r:ipsec_spd_t:s0-s15:c0.c1023
        esp=3des-md5
