Enable PFS for Windows IKEv2

2025-01-27 22:39:18 +02:00 · 2025-01-27 22:39:18 +02:00 · b173dcaa17
commit b173dcaa17
parent fbbba648c4
2 changed files with 6 additions and 6 deletions
--- a/client/protocols/ikev2_vpn_protocol_windows.cpp
+++ b/client/protocols/ikev2_vpn_protocol_windows.cpp
@ -238,7 +238,7 @@ ErrorCode Ikev2Protocol::start()
                                "-CipherTransformConstants GCMAES128 "
                                "-EncryptionMethod AES256 "
                                "-IntegrityCheckMethod SHA256 "
-                                "-PfsGroup None "
+                                "-PfsGroup PFS2048 "
                                "-DHGroup Group14 "
                                "-PassThru -Force\"")
                            .arg(tunnelName());