aboutsummaryrefslogtreecommitdiffstats
path: root/Source/charon
diff options
context:
space:
mode:
Diffstat (limited to 'Source/charon')
-rw-r--r--Source/charon/config/configuration_manager.c13
1 files changed, 7 insertions, 6 deletions
diff --git a/Source/charon/config/configuration_manager.c b/Source/charon/config/configuration_manager.c
index d3c6425d4..6239a4450 100644
--- a/Source/charon/config/configuration_manager.c
+++ b/Source/charon/config/configuration_manager.c
@@ -292,7 +292,7 @@ static void load_default_config (private_configuration_manager_t *this)
proposals[0].integrity_algorithm_key_length = 16;
proposals[0].pseudo_random_function = PRF_HMAC_MD5;
proposals[0].pseudo_random_function_key_length = 16;
- proposals[0].diffie_hellman_group = MODP_768_BIT;
+ proposals[0].diffie_hellman_group = MODP_1024_BIT;
proposals[1] = proposals[0];
proposals[1].integrity_algorithm = AUTH_HMAC_SHA1_96;
@@ -336,17 +336,18 @@ static void load_default_config (private_configuration_manager_t *this)
ts->destroy(ts);
/* ah and esp prop */
- child_proposals[0].ah.is_set = TRUE;
- child_proposals[0].ah.integrity_algorithm = AUTH_HMAC_MD5_96;
- child_proposals[0].ah.integrity_algorithm_key_size = 16;
+ child_proposals[0].ah.is_set = FALSE;
+ child_proposals[0].ah.integrity_algorithm = AUTH_HMAC_SHA1_96;
+ child_proposals[0].ah.integrity_algorithm_key_size = 20;
child_proposals[0].ah.diffie_hellman_group = MODP_1024_BIT;
child_proposals[0].ah.extended_sequence_numbers = NO_EXT_SEQ_NUMBERS;
child_proposals[0].esp.is_set = TRUE;
- child_proposals[0].esp.diffie_hellman_group = MODP_1024_BIT;
+ child_proposals[0].esp.diffie_hellman_group = MODP_UNDEFINED;
child_proposals[0].esp.encryption_algorithm = ENCR_AES_CBC;
child_proposals[0].esp.encryption_algorithm_key_size = 16;
- child_proposals[0].esp.integrity_algorithm = AUTH_UNDEFINED;
+ child_proposals[0].esp.integrity_algorithm = AUTH_HMAC_SHA1_96;
+ child_proposals[0].esp.integrity_algorithm_key_size = 20;
child_proposals[0].esp.extended_sequence_numbers = NO_EXT_SEQ_NUMBERS;
child_proposals[0].esp.spi[0] = 2;
child_proposals[0].esp.spi[1] = 2;