From 0b05ea19bc253e479fff585c0be7e5b23d934b30 Mon Sep 17 00:00:00 2001
From: Dan Guido <dan@trailofbits.com>
Date: Thu, 20 Apr 2017 07:26:46 -0400
Subject: [PATCH] Windows needs SHA2-256. Closes #453. (#456)

---
 roles/vpn/defaults/main.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/roles/vpn/defaults/main.yml b/roles/vpn/defaults/main.yml
index 0a23f24..d4e9bfd 100644
--- a/roles/vpn/defaults/main.yml
+++ b/roles/vpn/defaults/main.yml
@@ -25,5 +25,5 @@ ciphers:
     ike: aes128gcm16-prfsha512-ecp256!
     esp: aes128gcm16-ecp256!
   compat:
-    ike: aes128gcm16-prfsha512-ecp256,aes128-sha2_512-prfsha512-ecp256,aes128-sha2_512-prfsha512-modp2048!
-    esp: aes128gcm16-ecp256,aes128-sha2_512-prfsha512-ecp256,aes128-sha2_512-prfsha512-modp2048!
+    ike: aes128gcm16-prfsha512-ecp256,aes128-sha2_512-prfsha512-ecp256,aes128-sha2_256-prfsha256-modp2048!
+    esp: aes128gcm16-ecp256,aes128-sha2_512-prfsha512-ecp256,aes128-sha2_256-prfsha256-modp2048!