version	2

config setup
    protostack=netkey
    logfile=/etc/ipsec.d/pluto.log

conn certtest
        left=10.77.123.171
        leftid="CENTOS-171"
        leftcert="CENTOS-171"
	rightcert="CENTOS-172"
        right=10.77.123.172
        rightid="CENTOS-172"
	leftrsasigkey=%cert
        rightrsasigkey=%cert
        auto=add
	ikev2=insist
	authby=rsasig

include /etc/ipsec.d/*.conf