denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

128 bit default security strength requires 3072 bit prime DH group

Browse Source
This commit is contained in:
Andreas Steffen
2015-12-14 10:39:40 +01:00
parent 47e5640378
commit 5e2b740a00
35 changed files with 83 additions and 83 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/starter/confread.c
+2 -2
View File
@@ -40,8 +40,8 @@
#define SA_REPLACEMENT_RETRIES_DEFAULT 3
#define SA_REPLAY_WINDOW_DEFAULT -1 /* use charon.replay_window */
static const char ike_defaults[] = "aes128-sha1-modp2048,3des-sha1-modp1536";
static const char esp_defaults[] = "aes128-sha1,3des-sha1";
static const char ike_defaults[] = "aes128-sha256-modp3072";
static const char esp_defaults[] = "aes128-sha256";
static const char firewall_defaults[] = IPSEC_SCRIPT " _updown iptables";