summaryrefslogtreecommitdiff
path: root/sbin
diff options
context:
space:
mode:
authorHakan Olsson <ho@cvs.openbsd.org>2003-03-03 16:51:39 +0000
committerHakan Olsson <ho@cvs.openbsd.org>2003-03-03 16:51:39 +0000
commit1c14bbece4acb7de845ae05d715c064642e58509 (patch)
tree007674cb848c7b99a73a7231e6534453a6adbd9d /sbin
parent3055b12bd8bc07c75be9a8debbb332ab9f0f8836 (diff)
Re-add the BUGS section; the RFCs still do not permit differing DH groups
in the same proposal. This time, mention that this also applies to mixing PFS and non-PFS suites.
Diffstat (limited to 'sbin')
-rw-r--r--sbin/isakmpd/isakmpd.conf.57
1 files changed, 6 insertions, 1 deletions
diff --git a/sbin/isakmpd/isakmpd.conf.5 b/sbin/isakmpd/isakmpd.conf.5
index 3515881be18..699928a7210 100644
--- a/sbin/isakmpd/isakmpd.conf.5
+++ b/sbin/isakmpd/isakmpd.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: isakmpd.conf.5,v 1.73 2003/02/22 06:56:20 kjell Exp $
+.\" $OpenBSD: isakmpd.conf.5,v 1.74 2003/03/03 16:51:38 ho Exp $
.\" $EOM: isakmpd.conf.5,v 1.57 2000/12/21 14:43:17 ho Exp $
.\"
.\" Copyright (c) 1998, 1999, 2000 Niklas Hallqvist. All rights reserved.
@@ -1023,3 +1023,8 @@ configuration files.
.Xr keynote 4 ,
.Xr isakmpd.policy 5 ,
.Xr isakmpd 8
+.Sh BUGS
+The RFCs do not permit differing DH groups in the same proposal for
+aggressive and quick mode exchanges.
+Mixing both PFS and non-PFS suites in a quick mode proposal is not possible,
+as PFS implies using a DH group.