testing: Migrated ikev2 scenarios to new default plugins
This commit is contained in:
committed by
Tobias Brunner
parent
9de4efb1ae
commit
2099a52618
@@ -1,9 +1,9 @@
|
||||
# /etc/strongswan.conf - strongSwan configuration file
|
||||
|
||||
swanctl {
|
||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
||||
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||
}
|
||||
|
||||
charon-systemd {
|
||||
load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf kernel-netlink socket-default vici
|
||||
load = random nonce openssl pem pkcs1 curl revocation kernel-netlink socket-default vici
|
||||
}
|
||||
|
||||
@@ -16,8 +16,10 @@ connections {
|
||||
children {
|
||||
home {
|
||||
remote_ts = 10.1.0.0/16
|
||||
esp_proposals = aes128gcm128-modp3072
|
||||
}
|
||||
}
|
||||
version = 2
|
||||
proposals = aes128-sha256-modp3072
|
||||
}
|
||||
}
|
||||
|
||||
@@ -1,11 +1,11 @@
|
||||
# /etc/strongswan.conf - strongSwan configuration file
|
||||
|
||||
swanctl {
|
||||
load = pem pkcs1 x509 revocation constraints pubkey openssl random
|
||||
load = pem pkcs1 revocation constraints pubkey openssl random
|
||||
}
|
||||
|
||||
charon-systemd {
|
||||
load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf kernel-netlink socket-default vici
|
||||
load = random nonce openssl pem pkcs1 curl revocation kernel-netlink socket-default vici
|
||||
|
||||
cache_crls = yes
|
||||
}
|
||||
|
||||
@@ -14,8 +14,10 @@ connections {
|
||||
children {
|
||||
net {
|
||||
local_ts = 10.1.0.0/16
|
||||
}
|
||||
esp_proposals = aes128gcm128-modp3072
|
||||
}
|
||||
}
|
||||
version = 2
|
||||
proposals = aes128-sha256-modp3072
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user