upgraded openssl-ikev1 scenarios to 5.0.0

2012-05-04 12:06:45 +02:00
parent 3805e569f6
commit 90e941fb97
36 changed files with 142 additions and 207 deletions
@@ -1,10 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

 config setup
-        crlcheckinterval=180
-	strictcrlpolicy=no
-	charonstart=no
-	plutodebug=control
+	plutostart=no

 conn %default
 	ikelifetime=60m
@@ -12,7 +9,7 @@ conn %default
 	rekeymargin=3m
 	keyingtries=1
 	keyexchange=ikev1
-	ike=aes128-sha256-ecp192,aes128-sha256-ecp256!
+	ike=aes192-sha384-ecp192,aes128-sha256-ecp256!

 conn home
 	left=PH_IP_DAVE
@@ -1,11 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file

-pluto {
-  load = aes des sha1 sha2 md5 random pem pkcs1 x509 gmp pem pkcs1 openssl hmac curl kernel-netlink
-}
-
-# pluto uses optimized DH exponent sizes (RFC 3526)
-
-libstrongswan {
-  dh_exponent_ansi_x9_42 = no
+charon {
+  load = curl aes des sha1 sha2 md5 pem pkcs1 gmp pem pkcs1 x509 openssl revocation random hmac stroke kernel-netlink socket-default updown
 }