updated default configuration of UML hosts to 5.0.0

This commit is contained in:
Andreas Steffen
2012-06-25 13:04:55 +02:00
parent c38d6905a2
commit 5d476b4266
14 changed files with 19 additions and 72 deletions
+2 -8
View File
@@ -1,24 +1,18 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
nat_traversal=yes
charonstart=no
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
keyexchange=ikev1
conn nat-t
left=%defaultroute
left=%any
leftcert=bobCert.pem
[email protected]
leftfirewall=yes
right=%any
rightsubnetwithin=10.1.0.0/16
rightsubnet=10.1.0.0/16
auto=add
+2 -4
View File
@@ -1,11 +1,9 @@
# /etc/strongswan.conf - strongSwan configuration file
pluto {
load = sha1 sha2 md5 aes des hmac pem pkcs1 x509 gmp random nonce curl kernel-netlink
charon {
load = sha1 sha2 md5 aes des hmac pem pkcs1 x509 revocation constraints pubkey gmp random nonce curl kernel-netlink socket-default updown stroke
}
# pluto uses optimized DH exponent sizes (RFC 3526)
libstrongswan {
dh_exponent_ansi_x9_42 = no
}