From f6166ccde4f8c878f07af69099167026b29a0731 Mon Sep 17 00:00:00 2001 From: Jack Ivanov Date: Tue, 29 Nov 2016 22:14:18 +0300 Subject: [PATCH] modify ciphers #9 --- roles/vpn/templates/ipsec.conf.j2 | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/roles/vpn/templates/ipsec.conf.j2 b/roles/vpn/templates/ipsec.conf.j2 index c412994..58089c1 100644 --- a/roles/vpn/templates/ipsec.conf.j2 +++ b/roles/vpn/templates/ipsec.conf.j2 @@ -9,10 +9,10 @@ conn %default {% if Win10_Enabled is defined and Win10_Enabled == "Y" %} ike=aes128gcm16-sha2_256-prfsha256-ecp256,aes256-sha2_256-prfsha256-modp2048! - esp=aes128gcm16-sha2_256-ecp256,aes256-sha1-modp1024! + esp=aes128gcm16-sha2_256-ecp256,aes256-sha2_256-modp2048! {% else %} - ike=aes128gcm16-sha2_256-prfsha256-ecp256 - esp=aes128gcm16-sha2_256-ecp256 + ike=aes128gcm16-sha2_256-prfsha256-ecp256! + esp=aes128gcm16-sha2_256-ecp256! {% endif %} left=%any