From ad038f770d6e90d1121d898b555fff055711baff Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Thu, 15 Jun 2006 11:01:17 +0000 Subject: [PATCH] changed default algorithms to: ike: aes128-sha-modp2048 esp: aes128-sha1, 3des-md5 --- src/starter/confread.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/starter/confread.c b/src/starter/confread.c index 3bb837346..2389154ec 100644 --- a/src/starter/confread.c +++ b/src/starter/confread.c @@ -34,8 +34,8 @@ /* strings containing a colon are interpreted as an IPv6 address */ #define ip_version(string) (strchr(string, ':') != NULL)? AF_INET6 : AF_INET; -static const char ike_defaults[] = "3des-sha, 3des-md5"; -static const char esp_defaults[] = "3des-sha1, 3des-md5"; +static const char ike_defaults[] = "aes128-sha-modp2048"; +static const char esp_defaults[] = "aes128-sha1, 3des-md5"; static const char firewall_defaults[] = "ipsec _updown iptables";