upgraded gcrypt-ikev1 scenarios to 5.0.0

This commit is contained in:
Andreas Steffen
2012-05-06 09:25:31 +02:00
parent 04d7b1725d
commit 949d08dfca
32 changed files with 45 additions and 351 deletions
@@ -1,10 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
plutostart=no
conn %default
ikelifetime=60m
@@ -12,8 +9,8 @@ conn %default
rekeymargin=3m
keyingtries=1
keyexchange=ikev1
ike=serpent256-sha2_512-modp4096!
esp=serpent256-sha2_512!
ike=serpent256-sha512-modp4096!
esp=serpent256-sha512!
conn home
left=PH_IP_CAROL
@@ -1,11 +1,10 @@
# /etc/strongswan.conf - strongSwan configuration file
pluto {
load = pem pkcs1 x509 gcrypt hmac curl kernel-netlink
charon {
load = curl pem pkcs1 gcrypt x509 revocation hmac xcbc stroke kernel-netlink socket-default updown
send_vendor_id = yes
}
# pluto uses optimized DH exponent sizes (RFC 3526)
libstrongswan {
dh_exponent_ansi_x9_42 = no
}
@@ -1,10 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
plutostart=no
conn %default
ikelifetime=60m
@@ -12,8 +9,8 @@ conn %default
rekeymargin=3m
keyingtries=1
keyexchange=ikev1
ike=serpent256-sha2_512-modp4096!
esp=serpent256-sha2_512!
ike=serpent256-sha512-modp4096!
esp=serpent256-sha512!
conn rw
left=PH_IP_MOON
@@ -1,11 +1,10 @@
# /etc/strongswan.conf - strongSwan configuration file
pluto {
load = pem pkcs1 x509 gcrypt hmac curl kernel-netlink
charon {
load = curl pem pkcs1 gcrypt x509 revocation hmac xcbc stroke kernel-netlink socket-default updown
send_vendor_id = yes
}
# pluto uses optimized DH exponent sizes (RFC 3526)
libstrongswan {
dh_exponent_ansi_x9_42 = no
}