diff options
| -rw-r--r-- | sbin/isakmpd/isakmpd.conf.sample | 35 |
1 files changed, 13 insertions, 22 deletions
diff --git a/sbin/isakmpd/isakmpd.conf.sample b/sbin/isakmpd/isakmpd.conf.sample index fdb004e2e08..312bb9f1a45 100644 --- a/sbin/isakmpd/isakmpd.conf.sample +++ b/sbin/isakmpd/isakmpd.conf.sample @@ -1,17 +1,15 @@ -# $OpenBSD: isakmpd.conf.sample,v 1.3 1998/11/17 11:10:15 niklas Exp $ -# $EOM: isakmpd.conf.sample,v 1.15 1998/11/14 23:41:43 niklas Exp $ +# $OpenBSD: isakmpd.conf.sample,v 1.4 1998/11/20 07:33:34 niklas Exp $ +# $EOM: isakmpd.conf.sample,v 1.16 1998/11/20 07:12:35 niklas Exp $ # A configuration sample for the isakmpd ISAKMP/Oakley (aka IKE) daemon. [General] -Retransmits= 10 +Retransmits= 5 -[Main mode initiator] -Offered-transforms= BLF-SHA-16,DES-MD5 - -[Main mode responder] -# XXX Not yet supported. +[Main mode] +Offered-transforms= BLF-SHA-M1024,DES-MD5 #Accepted-transforms= BLF-SHA-M1024,BLF-SHA-EC185,BLF-SHA-EC155,DES-MD5 +Accepted-transforms= BLF-SHA-EC185,BLF-SHA-EC155,DES-MD5 [DES-MD5] ENCRYPTION_ALGORITHM= DES_CBC @@ -20,41 +18,34 @@ AUTHENTICATION_METHOD= PRE_SHARED GROUP_DESCRIPTION= MODP_768 Life= LIFE_600_SECS -[BLF-SHA-16] -ENCRYPTION_ALGORITHM= BLOWFISH_CBC -KEY_LENGTH= 128 -HASH_ALGORITHM= SHA -AUTHENTICATION_METHOD= PRE_SHARED -GROUP_DESCRIPTION= MODP_1024 -Life= LIFE_600_SECS - [BLF-SHA-M1024] -ENCRYPTION_ALGORITHM= BLOWFISH +ENCRYPTION_ALGORITHM= BLOWFISH_CBC +KEY_LENGTH= 128,64:196 HASH_ALGORITHM= SHA AUTHENTICATION_METHOD= PRE_SHARED GROUP_DESCRIPTION= MODP_1024 Life= LIFE_600_SECS [BLF-SHA-EC155] -ENCRYPTION_ALGORITHM= BLOWFISH +ENCRYPTION_ALGORITHM= BLOWFISH_CBC +KEY_LENGTH= 128,64:196 HASH_ALGORITHM= SHA AUTHENTICATION_METHOD= PRE_SHARED GROUP_DESCRIPTION= EC2N_155 Life= LIFE_600_SECS [BLF-SHA-EC185] -ENCRYPTION_ALGORITHM= BLOWFISH +ENCRYPTION_ALGORITHM= BLOWFISH_CBC +KEY_LENGTH= 128,64:196 HASH_ALGORITHM= SHA AUTHENTICATION_METHOD= PRE_SHARED GROUP_DESCRIPTION= EC2N_185 Life= LIFE_600_SECS -[Quick mode initiator] +[Quick mode] #Offered-suites= QM-ESP-DES-SUITE,\ # QM-ESP-DES-MD5-SUITE,QM-AH-MD5-ESP-DES-SUITE Offered-suites= QM-ESP-DES-SUITE - -[Quick mode responder] # XXX Not yet supported. #Accepted-suites= QM-ESP-DES-MD5-SUITE,QM-AH-MD5-ESP-DES-SUITE |