AZEN-SGG/amnezia-client
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Enable PFS for Linux IPSec

Browse source
This commit is contained in:
Mykola Baibuz 2025-02-07 12:58:37 +02:00
parent b5cbcc5f2a
commit f47e4cb729
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
client/server_scripts/ipsec/template.conf
View file

@ -21,6 +21,7 @@ conn ikev2-vpn
rightsendcert=never rightsendcert=never
eap_identity=%identity eap_identity=%identity
encapsulation=yes encapsulation=yes
pfs=yes
ike=aes256-sha256-modp2048,aes256-sha1-modp1024,3des-sha1-modp1024 ike=aes256-sha256-modp2048,aes256-sha1-modp1024,3des-sha1-modp1024
esp=aes256-sha256,aes256-sha1,3des-sha1 esp=aes256-sha256,aes256-sha1,3des-sha1