128 bit default security strength requires 3072 bit prime DH group
This commit is contained in:
@@ -8,8 +8,8 @@ conn %default
|
||||
rekeymargin=3m
|
||||
keyingtries=1
|
||||
keyexchange=ikev2
|
||||
ike=aes128-sha256-modp2048!
|
||||
esp=aes128-sha256-modp2048!
|
||||
ike=aes128-sha256-modp3072!
|
||||
esp=aes128-sha256-modp3072!
|
||||
|
||||
conn home
|
||||
left=PH_IP_CAROL
|
||||
|
||||
@@ -8,8 +8,8 @@ conn %default
|
||||
rekeymargin=3m
|
||||
keyingtries=1
|
||||
keyexchange=ikev2
|
||||
ike=aes128-sha256-modp2048!
|
||||
esp=aes128-sha256-modp2048!
|
||||
ike=aes128-sha256-modp3072!
|
||||
esp=aes128-sha256-modp3072!
|
||||
|
||||
conn rw
|
||||
left=PH_IP_MOON
|
||||
|
||||
Reference in New Issue
Block a user