wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-09-06 20:13:11 +02:00
Code Issues Projects Releases Wiki Activity

New ciphers implementing #247

Browse source
This commit is contained in:
Jack Ivanov 2017-04-05 17:32:59 +02:00
parent b06524d3e0
commit 92b07aa6f0
3 changed files with 19 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
roles/vpn/defaults/main.yml
View file

@ -19,3 +19,14 @@ strongswan_enabled_plugins:
- socket-default - socket-default
- stroke - stroke
- x509 - x509
ciphers:
old:
ike: aes128gcm16-sha2_256-prfsha256-ecp256!
esp: aes128gcm16-sha2_256-ecp256!
defaults:
ike: aes192gcm16-prfsha512-ecp521!
esp: aes192gcm16-ecp521!
windows:
ike: aes128gcm16-sha2_256-prfsha256-ecp256,aes256-sha2_256-prfsha256-modp2048!
esp: aes128gcm16-sha2_256-ecp256,aes256-sha2_256-modp2048!

8
roles/vpn/templates/client_ipsec.conf.j2
View file

@ -7,11 +7,11 @@ conn ikev2-{{ IP_subject_alt_name }}
dpddelay=35s dpddelay=35s
{% if Win10_Enabled is defined and Win10_Enabled == "Y" %} {% if Win10_Enabled is defined and Win10_Enabled == "Y" %}
ike=aes128gcm16-sha2_256-prfsha256-ecp256,aes256-sha2_256-prfsha256-modp2048! ike={{ ciphers.windows.ike }}
esp=aes128gcm16-sha2_256-ecp256,aes256-sha1-modp1024! esp={{ ciphers.windows.esp }}
{% else %} {% else %}
ike=aes128gcm16-sha2_256-prfsha256-ecp256 ike={{ ciphers.defaults.ike }}
esp=aes128gcm16-sha2_256-ecp256 esp={{ ciphers.defaults.esp }}
{% endif %} {% endif %}
right={{ IP_subject_alt_name }} right={{ IP_subject_alt_name }}

8
roles/vpn/templates/ipsec.conf.j2
View file

@ -11,11 +11,11 @@ conn %default
dpddelay=35s dpddelay=35s
{% if Win10_Enabled is defined and Win10_Enabled == "Y" %} {% if Win10_Enabled is defined and Win10_Enabled == "Y" %}
ike=aes128gcm16-sha2_256-prfsha256-ecp256,aes256-sha2_256-prfsha256-modp2048! ike={{ ciphers.windows.ike }}
esp=aes128gcm16-sha2_256-ecp256,aes256-sha2_256-modp2048! esp={{ ciphers.windows.esp }}
{% else %} {% else %}
ike=aes128gcm16-sha2_256-prfsha256-ecp256! ike={{ ciphers.defaults.ike }}
esp=aes128gcm16-sha2_256-ecp256! esp={{ ciphers.defaults.esp }}
{% endif %} {% endif %}
left=%any left=%any