# /etc/ipsec.conf - Libreswan IPsec configuration file

version 2.0

config setup
	# put the logs in /tmp for the UMLs, so that we can operate
	# without syslogd, which seems to break on UMLs
	plutostderrlog=/tmp/pluto.log
	plutorestartoncrash=false
	dumpdir=/tmp
	protostack=netkey

include	/testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common

conn wide
        auto=ignore
        authby=secret
        type=transport
        left=127.0.0.1
        right=127.0.0.1
        ike=aes-sha1
        phase2=esp
        loopback=yes

conn narrow
        auto=ignore
        authby=never
        type=passthrough
        left=127.0.0.1
        right=127.0.0.1
        leftprotoport=tcp/22
        loopback=yes

