tohe
/
7u83-ipsec
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

multiple encryption and hash algos for p2

This commit is contained in:
7u83 2018-02-28 19:49:56 +01:00
parent 26b2806652
commit c5bf01d089
2 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
templates/racoon/racoon.conf.erb
View File

@ -25,8 +25,9 @@ remote <%= @remote_ip %> {
sainfo address <%= net['local'] %> <%= @netproto %> address <%= net['remote'] %> <%= @netproto %> sainfo address <%= net['local'] %> <%= @netproto %> address <%= net['remote'] %> <%= @netproto %>
{ {
pfs_group <%= @pfs_group %>; pfs_group <%= @pfs_group %>;
encryption_algorithm <%= @saencryption %>; encryption_algorithm <%= @saencryption.join(",") %>;
authentication_algorithm hmac_<%= @p2hash %>; <%- @komma="" -%>
authentication_algorithm <%- @p2hash.each do |hmalgo| -%><%=@komma -%>hmac_<%= hmalgo -%> <%- @komma=',' -%> <%- end -%>;
compression_algorithm deflate; compression_algorithm deflate;
lifetime time <%= @salifetime %>; lifetime time <%= @salifetime %>;
} }

5
templates/strongswan/ipsec.conf.tunnel.erb
View File

@ -10,7 +10,10 @@ conn "<%= @title %>"
right=<%= @remote_ip %> right=<%= @remote_ip %>
rightsubnet=<%= net['remote'] %> rightsubnet=<%= net['remote'] %>
ike=<%= @encryption %>-<%= @hash %>-<%= @dh_group %> ike=<%= @encryption %>-<%= @hash %>-<%= @dh_group %>
esp=<%= @saencryption %>-<%= @p2hash %>-<%= @pfs_group %> <%- @komma='' -%>
esp= <%- @saencryption.each do |saenc| -%> <%- @p2hash.each do |p2h| -%><%= @komma -%><%= saenc %>-<%= p2h %>-<%= @pfs_group -%> <%- @komma=',' %><%- end -%> <%- end -%>
auto=start auto=start
authby=secret authby=secret
keyexchange=ikev1 keyexchange=ikev1