128 bit default security strength requires 3072 bit prime DH group
This commit is contained in:
1 parent
47e5640378
commit
5e2b740a00
35 files changed
+83
-83
No files matched your search
@@ -2,8 +2,8 @@ moon::ipsec status 2> /dev/null::net-net.*ESTABLISHED.*moon.strongswan.org.*sun.
|
||||
sun:: ipsec status 2> /dev/null::net-net.*ESTABLISHED.*sun.strongswan.org.*moon.strongswan.org::YES
|
||||
moon::ipsec status 2> /dev/null::net-net.*INSTALLED, TUNNEL::YES
|
||||
sun:: ipsec status 2> /dev/null::net-net.*INSTALLED, TUNNEL::YES
|
||||
moon::ipsec statusall 2> /dev/null::net-net\[1].*NULL/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048::YES
|
||||
sun:: ipsec statusall 2> /dev/null::net-net\[1].*NULL/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048::YES
|
||||
moon::ipsec statusall 2> /dev/null::net-net\[1].*NULL/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_3072::YES
|
||||
sun:: ipsec statusall 2> /dev/null::net-net\[1].*NULL/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_3072::YES
|
||||
alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_req=1::YES
|
||||
moon::ipsec statusall 2> /dev/null::net-net[{]1}.*NULL/HMAC_SHA2_256::YES
|
||||
sun:: ipsec statusall 2> /dev/null::net-net[{]1}.*NULL/HMAC_SHA2_256::YES
|
||||
|
||||
@@ -8,8 +8,8 @@ conn %default
|
||||
rekeymargin=3m
|
||||
keyingtries=1
|
||||
keyexchange=ikev2
|
||||
ike=null-sha256-modp2048!
|
||||
esp=null-sha256-modp2048!
|
||||
ike=null-sha256-modp3072!
|
||||
esp=null-sha256-modp3072!
|
||||
mobike=no
|
||||
|
||||
conn net-net
|
||||
|
||||
@@ -8,8 +8,8 @@ conn %default
|
||||
rekeymargin=3m
|
||||
keyingtries=1
|
||||
keyexchange=ikev2
|
||||
ike=null-sha256-modp2048!
|
||||
esp=null-sha256-modp2048!
|
||||
ike=null-sha256-modp3072!
|
||||
esp=null-sha256-modp3072!
|
||||
mobike=no
|
||||
|
||||
conn net-net
|
||||
|
||||
Reference in new issue
Block a user