multiple encryption and hash algos for p2

This commit is contained in:
7u83 2018-02-28 19:49:56 +01:00
parent 26b2806652
commit c5bf01d089
2 changed files with 7 additions and 3 deletions

View File

@ -25,8 +25,9 @@ remote <%= @remote_ip %> {
sainfo address <%= net['local'] %> <%= @netproto %> address <%= net['remote'] %> <%= @netproto %>
{
pfs_group <%= @pfs_group %>;
encryption_algorithm <%= @saencryption %>;
authentication_algorithm hmac_<%= @p2hash %>;
encryption_algorithm <%= @saencryption.join(",") %>;
<%- @komma="" -%>
authentication_algorithm <%- @p2hash.each do |hmalgo| -%><%=@komma -%>hmac_<%= hmalgo -%> <%- @komma=',' -%> <%- end -%>;
compression_algorithm deflate;
lifetime time <%= @salifetime %>;
}

View File

@ -10,7 +10,10 @@ conn "<%= @title %>"
right=<%= @remote_ip %>
rightsubnet=<%= net['remote'] %>
ike=<%= @encryption %>-<%= @hash %>-<%= @dh_group %>
esp=<%= @saencryption %>-<%= @p2hash %>-<%= @pfs_group %>
<%- @komma='' -%>
esp= <%- @saencryption.each do |saenc| -%> <%- @p2hash.each do |p2h| -%><%= @komma -%><%= saenc %>-<%= p2h %>-<%= @pfs_group -%> <%- @komma=',' %><%- end -%> <%- end -%>
auto=start
authby=secret
keyexchange=ikev1