diff options
| author | Ermal LUÇI <eri@pfsense.org> | 2014-11-25 20:55:57 +0100 |
|---|---|---|
| committer | Ermal LUÇI <eri@pfsense.org> | 2014-11-25 20:56:25 +0100 |
| commit | ee12796723870744bdae124596238e7bd6fb605f (patch) | |
| tree | 8dc9f561fa0e518da5b1c466be767764b1d213ce /etc/inc/ipsec.inc | |
| parent | 79f4c9700982022bb0ec7e5b380c93acbc5e875a (diff) | |
| download | pfsense-ee12796723870744bdae124596238e7bd6fb605f.zip pfsense-ee12796723870744bdae124596238e7bd6fb605f.tar.gz | |
Remove AES-GCM from phase1 settings algos since its not recommended
Diffstat (limited to 'etc/inc/ipsec.inc')
| -rw-r--r-- | etc/inc/ipsec.inc | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/etc/inc/ipsec.inc b/etc/inc/ipsec.inc index b264cba..f2eaa06 100644 --- a/etc/inc/ipsec.inc +++ b/etc/inc/ipsec.inc @@ -60,9 +60,6 @@ $peer_identifier_list = array( $p1_ealgos = array( 'aes' => array( 'name' => 'AES', 'keysel' => array( 'lo' => 128, 'hi' => 256, 'step' => 64 ) ), - 'aes128gcm' => array( 'name' => 'AES128-GCM', 'keysel' => array( 'lo' => 64, 'hi' => 128, 'step' => 32 ) ), - 'aes192gcm' => array( 'name' => 'AES192-GCM', 'keysel' => array( 'lo' => 64, 'hi' => 128, 'step' => 32 ) ), - 'aes256gcm' => array( 'name' => 'AES256-GCM', 'keysel' => array( 'lo' => 64, 'hi' => 128, 'step' => 32 ) ), 'blowfish' => array( 'name' => 'Blowfish', 'keysel' => array( 'lo' => 128, 'hi' => 256, 'step' => 64 ) ), '3des' => array( 'name' => '3DES' ), 'cast128' => array( 'name' => 'CAST128' ), |
