connections { home { remote_addrs = 192.168.0.1 local { auth = pubkey certs = carolCert.pem } remote { auth = pubkey id = moon.strongswan.org revocation = strict } children { alice { remote_ts = 10.1.0.10/32 esp_proposals = aes128-sha256-ecp256 } venus { remote_ts = 10.1.0.20/32 esp_proposals = aes128-sha256-ecp256 } } version = 2 proposals = aes128-sha256-ecp256 } } authorities { strongswan { cacert = strongswanCert.pem cert_uri_base = http://winnetou.strongswan.org/certs/ } research { cacert = researchCert.pem cert_uri_base = http://winnetou.strongswan.org/certs/research/ } }