diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2016-03-11 10:24:36 +0100 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2016-03-11 10:25:06 +0100 |
| commit | 8e3940f59c9fd49a4ce678241cad16a96fc7aa3f (patch) | |
| tree | cceba9aa1307b0d23291eab84056acd51a81cc7c /man | |
| parent | 0fc8b1d03e908e1b01def221e12e228f673f1430 (diff) | |
| download | strongswan-8e3940f59c9fd49a4ce678241cad16a96fc7aa3f.tar.bz2 strongswan-8e3940f59c9fd49a4ce678241cad16a96fc7aa3f.tar.xz | |
man: Updated default proposals in ipsec.conf(5)
Diffstat (limited to 'man')
| -rw-r--r-- | man/ipsec.conf.5.in | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in index f070eaa59..54440c0c7 100644 --- a/man/ipsec.conf.5.in +++ b/man/ipsec.conf.5.in @@ -402,7 +402,7 @@ or keyword may be used, AH+ESP bundles are not supported. Defaults to -.BR aes128-sha1,3des-sha1 . +.BR aes128-sha256 . The daemon adds its extensive default proposal to this default or the configured value. To restrict it to the configured proposal an exclamation mark @@ -453,7 +453,7 @@ if required. .BR ike " = <cipher suites>" comma-separated list of IKE/ISAKMP SA encryption/authentication algorithms to be used, e.g. -.BR aes128-sha1-modp2048 . +.BR aes128-sha256-modp3072 . The notation is .BR encryption-integrity[-prf]-dhgroup . If no PRF is given, the algorithms defined for integrity are used for the PRF. @@ -466,10 +466,10 @@ or .BR prfaesxcbc ). .br In IKEv2, multiple algorithms and proposals may be included, such as -.BR aes128-aes256-sha1-modp1536-modp2048,3des-sha1-md5-modp1024 . +.BR aes128-aes256-sha1-modp3072-modp2048,3des-sha1-md5-modp1024 . Defaults to -.BR aes128-sha1-modp2048,3des-sha1-modp1536 . +.BR aes128-sha256-modp3072 . The daemon adds its extensive default proposal to this default or the configured value. To restrict it to the configured proposal an exclamation mark |