# /etc/ipsec.conf - Libreswan IPsec configuration file

config setup
	# put the logs in /tmp for the UMLs, so that we can operate
	# without syslogd, which seems to break on UMLs
	plutostderrlog=/tmp/pluto.log
	plutorestartoncrash=false
	dumpdir=/tmp
	protostack=netkey
	plutodebug=all
	secctx_attr_value=32001

conn labeled
	also=west-east
	phase2=ah
	phase2alg=sha1
	type=transport
	labeled_ipsec=yes
	policy_label=system_u:object_r:ipsec_spd_t:s0-s15:c0.c1023
	leftprotoport=tcp
	rightprotoport=tcp/4300

include	/testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common