upgraded openssl-ikev1 scenarios to 5.0.0

2012-05-04 12:06:45 +02:00
parent 3805e569f6
commit 90e941fb97
36 changed files with 142 additions and 207 deletions
@@ -1,10 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

 config setup
-	plutodebug="control crypt"
-	crlcheckinterval=180
-	strictcrlpolicy=no
-	charonstart=no
+	plutostart=no

 conn %default
 	ikelifetime=60m
@@ -12,11 +9,12 @@ conn %default
 	rekeymargin=3m
 	keyingtries=1
 	keyexchange=ikev1
-	ike=camellia192-sha384-modp3072!
-	esp=camellia192-sha384!
+	ike=camellia256-sha512-modp2048!
+	esp=camellia192-sha1!

 conn home
 	left=PH_IP_CAROL
+	leftfirewall=yes
 	leftcert=carolCert.pem
 	[email protected]
 	right=PH_IP_MOON
@@ -1,11 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file

-pluto {
-  load = pem pkcs1 openssl random hmac curl kernel-netlink
-}
-
-# pluto uses optimized DH exponent sizes (RFC 3526)
-
-libstrongswan {
-  dh_exponent_ansi_x9_42 = no
+charon {
+  load = curl pem pkcs1 openssl revocation random hmac xcbc stroke kernel-netlink socket-default updown
 }
@@ -1,25 +1,22 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

 config setup
-	plutodebug="control crypt"
-	crlcheckinterval=180
-	strictcrlpolicy=no
-	charonstart=no
-       
+	plutostart=no
+
 conn %default
 	ikelifetime=60m
 	keylife=20m
 	rekeymargin=3m
 	keyingtries=1
 	keyexchange=ikev1
-	ike=camellia192-sha384-modp3072!
-	esp=camellia192-sha384!
+	ike=camellia256-sha512-modp2048!
+	esp=camellia192-sha1!

 conn rw
 	left=PH_IP_MOON
+	leftfirewall=yes
 	leftcert=moonCert.pem
 	[email protected]
 	leftsubnet=10.1.0.0/16
 	right=%any
-	[email protected]
 	auto=add
@@ -1,11 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file

-pluto {
-  load = pem pkcs1 openssl random hmac curl kernel-netlink
-}
-
-# pluto uses optimized DH exponent sizes (RFC 3526)
-
-libstrongswan {
-  dh_exponent_ansi_x9_42 = no
+charon {
+  load = curl pem pkcs1 openssl revocation random hmac xcbc stroke kernel-netlink socket-default updown
 }