# /etc/ipsec.conf - Libreswan IPsec configuration file

version 2.0

config setup
	# put the logs in /tmp for the UMLs, so that we can operate
	# without syslogd, which seems to break on UMLs
	plutostderrlog=/tmp/pluto.log
	plutodebug=all
	plutorestartoncrash=false
	dumpdir=/tmp
	protostack=netkey

include	/testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common

conn wide
	auto=ignore
	authby=secret
	type=transport
	left=127.0.0.1
	right=127.0.0.1
	#ike=aes-sha1
	#phase2=esp
	loopback=yes

conn narrow
	auto=ignore
	authby=never
	type=passthrough
	left=127.0.0.1
	right=127.0.0.1
	leftprotoport=tcp/22
	loopback=yes