Reto Buerki
117375ed00
A connection between the hosts moon and sun is set up. The host moon uses the Trusted Key Manager (TKM) and is the initiator of the transport connection. The authentication is based on X.509 certificates.
11 lines
510 B
Plaintext
11 lines
510 B
Plaintext
moon::rm /etc/ipsec.secrets
|
|
moon::tkm_cfgtool -c /etc/tkm/tkm.conf -i /etc/ipsec.conf -t /etc/tkm/tkm.bin -s /usr/local/share/tkm/tkmconfig.xsd
|
|
moon::cat /etc/ipsec.conf
|
|
moon::tkm_keymanager -c /etc/tkm/tkm.bin -k /etc/tkm/moonKey.der -r /etc/tkm/strongswanCert.der >/tmp/tkm.log 2>&1 &
|
|
moon::expect-file /tmp/tkm.rpc.ike
|
|
moon::DAEMON_NAME=charon-tkm ipsec start
|
|
sun::ipsec start
|
|
sun::expect-connection host-host
|
|
moon::DAEMON_NAME=charon-tkm expect-connection conn1
|
|
moon::DAEMON_NAME=charon-tkm ipsec up conn1
|