# /etc/ipsec.conf - Libreswan IPsec configuration file

version 2.0

config setup
	# put the logs in /tmp for the UMLs, so that we can operate
	# without syslogd, which seems to break on UMLs
	plutostderrlog=/tmp/pluto.log
	plutodebug=all
	plutorestartoncrash=false
	dumpdir=/tmp
	protostack=netkey
	secctx-attr-value=32001

include	/testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common

conn loopback-westleft
	authby=secret
	type=transport
	left=127.0.0.1
	right=127.0.0.1
	loopback=yes
	leftprotoport=tcp/4300
	rightprotoport=tcp
	labeled_ipsec=yes
	policy_label=system_u:object_r:ipsec_spd_t:s0-s15:c0.c1023


conn loopback-westright
	authby=secret
	type=transport
	left=127.0.0.1
	right=127.0.0.1
	loopback=yes
	leftprotoport=tcp
	rightprotoport=tcp/4300
	labeled_ipsec=yes
	policy_label=system_u:object_r:ipsec_spd_t:s0-s15:c0.c1023