aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMartin Willi <martin@strongswan.org>2006-06-15 11:01:17 +0000
committerMartin Willi <martin@strongswan.org>2006-06-15 11:01:17 +0000
commitad038f770d6e90d1121d898b555fff055711baff (patch)
treebcb245481193059b86b5122310a2ed51a06df792
parentb98e0927f4e8296f471919801d80569422dcaa53 (diff)
downloadstrongswan-ad038f770d6e90d1121d898b555fff055711baff.tar.bz2
strongswan-ad038f770d6e90d1121d898b555fff055711baff.tar.xz
changed default algorithms to:
ike: aes128-sha-modp2048 esp: aes128-sha1, 3des-md5
-rw-r--r--src/starter/confread.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/src/starter/confread.c b/src/starter/confread.c
index 3bb837346..2389154ec 100644
--- a/src/starter/confread.c
+++ b/src/starter/confread.c
@@ -34,8 +34,8 @@
/* strings containing a colon are interpreted as an IPv6 address */
#define ip_version(string) (strchr(string, ':') != NULL)? AF_INET6 : AF_INET;
-static const char ike_defaults[] = "3des-sha, 3des-md5";
-static const char esp_defaults[] = "3des-sha1, 3des-md5";
+static const char ike_defaults[] = "aes128-sha-modp2048";
+static const char esp_defaults[] = "aes128-sha1, 3des-md5";
static const char firewall_defaults[] = "ipsec _updown iptables";