upgraded openssl-ikev2 scenarios to 5.0.0

2012-05-04 12:03:05 +02:00
parent 22bec9d4ae
commit 3805e569f6
39 changed files with 90 additions and 136 deletions
@@ -1,8 +1,6 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

 config setup
-        crlcheckinterval=180
-	strictcrlpolicy=no
 	plutostart=no

 conn %default
@@ -11,7 +9,7 @@ conn %default
 	rekeymargin=3m
 	keyingtries=1
 	keyexchange=ikev2
-	ike=aes192-sha384-ecp256,aes192-sha384-ecp384!
+	ike=aes128-sha256-ecp256,aes192-sha384-ecp384!

 conn home
 	left=PH_IP_CAROL
@@ -3,7 +3,3 @@
 charon {
  load = curl pem pkcs1 openssl revocation random hmac stroke kernel-netlink socket-default updown
 }
-
-libstrongswan {
-  ecp_x_coordinate_only = no
-}
@@ -1,8 +1,6 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

 config setup
-        crlcheckinterval=180
-	strictcrlpolicy=no
 	plutostart=no

 conn %default
@@ -11,7 +9,7 @@ conn %default
 	rekeymargin=3m
 	keyingtries=1
 	keyexchange=ikev2
-	ike=aes256-sha512-ecp256,aes256-sha512-ecp521!
+	ike=aes128-sha256-ecp256,aes256-sha512-ecp521!

 conn home
 	left=PH_IP_DAVE
@@ -1,9 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file

 charon {
-  load = curl aes des sha1 sha2 md5 pem pkcs1 random gmp pem pkcs1 x509 openssl revocation hmac stroke kernel-netlink socket-default updown
-}
-
-libstrongswan {
-  ecp_x_coordinate_only = no
+  load = curl aes des sha1 sha2 md5 pem pkcs1 gmp pem pkcs1 x509 openssl revocation random hmac stroke kernel-netlink socket-default updown
 }
@@ -1,8 +1,6 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

 config setup
-        crlcheckinterval=180
-	strictcrlpolicy=no
 	plutostart=no

 conn %default
@@ -3,7 +3,3 @@
 charon {
  load = curl pem pkcs1 openssl revocation random hmac stroke kernel-netlink socket-default updown
 }
-
-libstrongswan {
-  ecp_x_coordinate_only = no
-}