1 # $KAME: racoon.conf.sample,v 1.28 2002/10/18 14:33:28 itojun Exp $
3 # "path" affects "include" directive. "path" must be specified before any
4 # "include" directive with relative file path.
5 # you can overwrite "path" directive afterwards, however, doing so may add
7 #path include "/usr/local/v6/etc" ;
8 #include "remote.conf" ;
10 # the file should contain key ID/key pairs, for pre-shared key authentication.
11 path pre_shared_key "/usr/local/v6/etc/psk.txt" ;
13 # racoon will look for certificate file in the directory,
14 # if the certificate/certificate request payload is received.
15 #path certificate "/usr/local/openssl/certs" ;
17 # "log" specifies logging level. It is followed by either "notify", "debug"
23 #exchange_mode main,aggressive,base;
24 exchange_mode main,base;
26 #my_identifier fqdn "server.kame.net";
27 #certificate_type x509 "foo@kame.net.cert" "foo@kame.net.priv" ;
29 lifetime time 24 hour ; # sec,min,hour
31 #initial_contact off ;
34 # phase 1 proposal (for ISAKMP SA)
36 encryption_algorithm 3des;
38 authentication_method pre_shared_key ;
42 # the configuration makes racoon (as a responder) to obey the
43 # initiator's lifetime and PFS group proposal.
44 # this makes testing so much easier.
48 # phase 2 proposal (for IPsec SA).
49 # actual phase 2 proposal will obey the following items:
50 # - kernel IPsec policy configuration (like "esp/transport//use)
51 # - permutation of the crypto/hash/compression algorithms presented below
55 lifetime time 12 hour ;
56 encryption_algorithm 3des, cast128, blowfish 448, des, rijndael ;
57 authentication_algorithm hmac_sha1, hmac_md5 ;
58 compression_algorithm deflate ;