applied aes-xcbc-96 to ike as well

This commit is contained in:
Andreas Steffen 2008-05-13 19:37:01 +00:00
parent 2e77a49c8c
commit 6878fa738a
8 changed files with 6 additions and 6 deletions

View File

@ -0,0 +1,4 @@
Roadwarrior <b>carol</b> proposes to gateway <b>moon</b> the ESP cipher suite
<b>AES_CBC-256/AES_XCBC_96</b> by defining <b>esp=aes256-aesxcbc-modp2048</b>
in ipsec.conf. The same cipher suite is used for IKE: <b>ike=aes256-aesxcbc-modp2048</b>.
A ping from <b>carol</b> to <b>alice</b> successfully checks the established tunnel.

View File

@ -11,7 +11,7 @@ conn %default
rekeymargin=3m
keyingtries=1
keyexchange=ikev2
ike=aes256-sha256-modp2048!
ike=aes256-aesxcbc-modp2048!
esp=aes256-aesxcbc-modp2048!
conn home

View File

@ -11,7 +11,7 @@ conn %default
rekeymargin=3m
keyingtries=1
keyexchange=ikev2
ike=aes256-sha256-modp2048!
ike=aes256-aesxcbc-modp2048!
esp=aes256-aesxcbc-modp2048!
conn rw

View File

@ -1,4 +0,0 @@
Roadwarrior <b>carol</b> proposes to gateway <b>moon</b> the ESP cipher suite
<b>AES_CBC-256/AES_XCBC_96</b> by defining <b>esp=aes256-aesxcbc-modp2048</b>
in ipsec.conf. A ping from <b>carol</b> to <b>alice</b> successfully checks
the established tunnel.