# pre-generated and modified as tkm_cfgtool doesn't support multiple KEs yet

connections {
  conn1 {
    local_addrs=192.168.0.1
    remote_addrs=192.168.0.2
    proposals=aes256-sha512-modp3072-ke1_modp4096
    local {
      id=moon.strongswan.org
      certs=moonCert.pem
    }
    remote {
      id=sun.strongswan.org
    }
    children {
      conn1 {
        reqid=1
        life_time=60
        rekey_time=30
        mode=transport
        esp_proposals=aes256-sha512-modp3072-ke1_modp4096
        start_action=trap
      }
    }
  }
}
