128 bit default security strength requires 3072 bit prime DH group
This commit is contained in:
@@ -8,8 +8,8 @@ conn %default
|
||||
rekeymargin=3m
|
||||
keyingtries=1
|
||||
keyexchange=ikev2
|
||||
ike=null-sha256-modp2048!
|
||||
esp=null-sha256-modp2048!
|
||||
ike=null-sha256-modp3072!
|
||||
esp=null-sha256-modp3072!
|
||||
mobike=no
|
||||
|
||||
conn net-net
|
||||
|
||||
@@ -8,8 +8,8 @@ conn %default
|
||||
rekeymargin=3m
|
||||
keyingtries=1
|
||||
keyexchange=ikev2
|
||||
ike=null-sha256-modp2048!
|
||||
esp=null-sha256-modp2048!
|
||||
ike=null-sha256-modp3072!
|
||||
esp=null-sha256-modp3072!
|
||||
mobike=no
|
||||
|
||||
conn net-net
|
||||
|
||||
Reference in New Issue
Block a user