path certificate "/etc/openssl/certs"; log notify ; remote 166.63.177.44 { exchange_mode main; my_identifier fqdn "marajade.sandelman.ottawa.on.ca"; certificate_type x509 "/etc/openssl/certs/marajade-2001.pem" "/etc/openssl/private/marajade.pem"; peers_certfile "/etc/openssl/certs/nsavax.pem"; verify_cert off; send_cert off; send_cr off; proposal { encryption_algorithm 3des; hash_algorithm md5; authentication_method rsasig; dh_group modp1536; } }