diff options
| author | Tobias Heider <tobhe@cvs.openbsd.org> | 2021-11-09 22:38:26 +0000 |
|---|---|---|
| committer | Tobias Heider <tobhe@cvs.openbsd.org> | 2021-11-09 22:38:26 +0000 |
| commit | f9e4a5f5b963dc7a988643dbc069dc76189e1ad4 (patch) | |
| tree | d58abb7cc720342a8f18443bbade83b47b82794e /sbin | |
| parent | 51dd471dbf7576a2ce5bddb60cbfd5e0cdb44bc5 (diff) | |
Use more sensible transforms in example config.
Diffstat (limited to 'sbin')
| -rw-r--r-- | sbin/iked/iked.conf.5 | 16 |
1 files changed, 8 insertions, 8 deletions
diff --git a/sbin/iked/iked.conf.5 b/sbin/iked/iked.conf.5 index dd89bef0f66..a584060e9a3 100644 --- a/sbin/iked/iked.conf.5 +++ b/sbin/iked/iked.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: iked.conf.5,v 1.89 2021/11/05 22:51:56 tobhe Exp $ +.\" $OpenBSD: iked.conf.5,v 1.90 2021/11/09 22:38:25 tobhe Exp $ .\" .\" Copyright (c) 2010 - 2014 Reyk Floeter <reyk@openbsd.org> .\" Copyright (c) 2004 Mathieu Sauve-Frankel All rights reserved. @@ -15,7 +15,7 @@ .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. .\" -.Dd $Mdocdate: November 5 2021 $ +.Dd $Mdocdate: November 9 2021 $ .Dt IKED.CONF 5 .Os .Sh NAME @@ -1071,13 +1071,13 @@ ikev2 "big test" \e from 192.168.1.1 to 192.168.2.2 \e peer any local any \e ikesa \e - enc 3des auth hmac-sha2-256 \e - group ecp256 group modp1024 \e + enc aes-128-gcm \e + group ecp256 group curve25519 \e ikesa \e - enc 3des auth hmac-sha1 \e - group ecp256 group modp1024 \e - childsa enc aes-128 auth hmac-sha2-256 \e - childsa enc aes-128 auth hmac-sha1 \e + enc aes-128 auth hmac-sha2-256 \e + group ecp256 group curve25519 \e + childsa enc aes-128-gcm \e + childsa enc aes-128 auth hmac-sha2-256 \e srcid host.example.com \e dstid 192.168.0.254 \e psk "foobar" |