denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added pfsgroup to ipsec.conf.5 man page

Browse Source
This commit is contained in:
Andreas Steffen
2008-07-15 13:07:27 +00:00
parent 4336a1c611
commit 0ef961b878
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/starter/ipsec.conf.5
+6
View File
@@ -705,6 +705,12 @@ IKEv2 always uses PFS for IKE_SA rekeying whereas for CHILD_SA rekeying
PFS is enforced by defining a Diffie-Hellman modp group in the PFS is enforced by defining a Diffie-Hellman modp group in the
.B esp .B esp
parameter. parameter.
.TP
.B pfsgroup
defines a Diffie-Hellman group for perfect forward secrecy in IKEv1 Quick Mode
differing from the DH group used for IKEv1 Main Mode (IKEv1 only).
.TP .TP
.B reauth .B reauth
whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1,