--- /dev/null
+# We keep PSK configurations in a separate config file until
+# --enable-tls-psk is on by default. This configuration is not valid
+# without PSK support.
+
+realm blocking-tls-psk {
+ type = "TLS"
+ timeout = 1
+ retries = 3
+ #pskstr = "sikrit psk"
+ pskhexstr = "deadbeef4711"
+ pskid = "Client_identity"
+ pskex = "PSK"
+ server {
+ hostname = "srv1"
+ service = "4433"
+ secret = "sikrit"
+ }
+}