wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-09-05 03:23:14 +02:00
Code Issues Projects Releases Wiki Activity

modify ciphers #247

Browse source
This commit is contained in:
Jack Ivanov 2017-04-05 22:10:23 +02:00
parent 92b07aa6f0
commit c7fead56ed
2 changed files with 6 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
roles/vpn/defaults/main.yml
View file

@ -21,12 +21,9 @@ strongswan_enabled_plugins:
- x509
ciphers:
old:
ike: aes128gcm16-sha2_256-prfsha256-ecp256!
esp: aes128gcm16-sha2_256-ecp256!
defaults:
ike: aes192gcm16-prfsha512-ecp521!
esp: aes192gcm16-ecp521!
ike: aes128gcm16-sha2_512-prfsha512-ecp256!
esp: aes128gcm16-sha2_512-ecp256!
windows:
ike: aes128gcm16-sha2_256-prfsha256-ecp256,aes256-sha2_256-prfsha256-modp2048!
esp: aes128gcm16-sha2_256-ecp256,aes256-sha2_256-modp2048!
ike: aes128gcm16-sha2_512-prfsha512-ecp256,aes128-sha2_256-prfsha256-modp2048!
esp: aes128gcm16-sha2_512-ecp256,aes128-sha2_256-modp2048!

4
roles/vpn/templates/mobileconfig.j2
View file

@ -64,7 +64,7 @@
<key>EncryptionAlgorithm</key>
<string>AES-128-GCM</string>
<key>IntegrityAlgorithm</key>
<string>SHA2-256</string>
<string>SHA2-512</string>
<key>LifeTimeInMinutes</key>
<integer>20</integer>
</dict>
@ -85,7 +85,7 @@
<key>EncryptionAlgorithm</key>
<string>AES-128-GCM</string>
<key>IntegrityAlgorithm</key>
<string>SHA2-256</string>
<string>SHA2-512</string>
<key>LifeTimeInMinutes</key>
<integer>20</integer>
</dict>