denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

man: Updated default proposals in ipsec.conf(5)

Browse Source
This commit is contained in:
Tobias Brunner
2016-03-11 10:25:06 +01:00
parent 0fc8b1d03e
commit 8e3940f59c
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/ipsec.conf.5.in
+4 -4
View File
@@ -402,7 +402,7 @@ or
keyword may be used, AH+ESP bundles are not supported. keyword may be used, AH+ESP bundles are not supported.
Defaults to Defaults to
.BR aes128-sha1,3des-sha1 . .BR aes128-sha256 .
The daemon adds its extensive default proposal to this default The daemon adds its extensive default proposal to this default
or the configured value. To restrict it to the configured proposal an or the configured value. To restrict it to the configured proposal an
exclamation mark exclamation mark
@@ -453,7 +453,7 @@ if required.
.BR ike " = <cipher suites>" .BR ike " = <cipher suites>"
comma-separated list of IKE/ISAKMP SA encryption/authentication algorithms comma-separated list of IKE/ISAKMP SA encryption/authentication algorithms
to be used, e.g. to be used, e.g.
.BR aes128-sha1-modp2048 . .BR aes128-sha256-modp3072 .
The notation is The notation is
.BR encryption-integrity[-prf]-dhgroup . .BR encryption-integrity[-prf]-dhgroup .
If no PRF is given, the algorithms defined for integrity are used for the PRF. If no PRF is given, the algorithms defined for integrity are used for the PRF.
@@ -466,10 +466,10 @@ or
.BR prfaesxcbc ). .BR prfaesxcbc ).
.br .br
In IKEv2, multiple algorithms and proposals may be included, such as In IKEv2, multiple algorithms and proposals may be included, such as
.BR aes128-aes256-sha1-modp1536-modp2048,3des-sha1-md5-modp1024 . .BR aes128-aes256-sha1-modp3072-modp2048,3des-sha1-md5-modp1024 .
Defaults to Defaults to
.BR aes128-sha1-modp2048,3des-sha1-modp1536 . .BR aes128-sha256-modp3072 .
The daemon adds its extensive default proposal to this The daemon adds its extensive default proposal to this
default or the configured value. To restrict it to the configured proposal an default or the configured value. To restrict it to the configured proposal an
exclamation mark exclamation mark