conn theoffice
	authby=rsasig
	pfs=no
	rekey=yes
	keyingtries=4
	type=transport
	leftupdown=/etc/ipsec.d/theoffice-updown
	left=192.168.1.66
	left=%defaultroute
	leftcert=/etc/ipsec.d/certs/my.name@theoffice.com-cert.pem
	leftrsasigkey=%cert
        leftprotoport=17/1701
	right=xxx.xxx.xxx.xxx
	rightid="C=US, ST=Colorado, L=Boulder, O=The Company, OU=IT, CN=zephyrus.theoffice.com"
	rightrsasigkey=%cert
	rightca=%same
	rightprotoport=17/1701
	auto=add

