summaryrefslogtreecommitdiffstats
path: root/usr/local/www/vpn_ipsec_phase2.php
diff options
context:
space:
mode:
authorChris Buechler <cmb@pfsense.org>2015-01-09 22:08:27 -0600
committerChris Buechler <cmb@pfsense.org>2015-01-09 22:08:27 -0600
commitc39feb71c3bc676f1ff17dc4d9bb50ce0bf99047 (patch)
tree26cec257a18e5cc01f4c35433718099ecfae8944 /usr/local/www/vpn_ipsec_phase2.php
parentc5ddb6ad4a787c2d1af589dae867d19a0e946cf8 (diff)
downloadpfsense-c39feb71c3bc676f1ff17dc4d9bb50ce0bf99047.zip
pfsense-c39feb71c3bc676f1ff17dc4d9bb50ce0bf99047.tar.gz
Default to only AES and SHA1 for new P2s.
Diffstat (limited to 'usr/local/www/vpn_ipsec_phase2.php')
-rw-r--r--usr/local/www/vpn_ipsec_phase2.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/usr/local/www/vpn_ipsec_phase2.php b/usr/local/www/vpn_ipsec_phase2.php
index bbf273a..6f07408 100644
--- a/usr/local/www/vpn_ipsec_phase2.php
+++ b/usr/local/www/vpn_ipsec_phase2.php
@@ -105,8 +105,8 @@ else
$pconfig['localid_type'] = "lan";
$pconfig['remoteid_type'] = "network";
$pconfig['proto'] = "esp";
- $pconfig['ealgos'] = explode(",", "3des,blowfish,cast128,aes");
- $pconfig['halgos'] = explode(",", "hmac_sha1,hmac_md5");
+ $pconfig['ealgos'] = explode(",", "aes");
+ $pconfig['halgos'] = explode(",", "hmac_sha1");
$pconfig['pfsgroup'] = "0";
$pconfig['lifetime'] = "3600";
$pconfig['uniqid'] = uniqid();
OpenPOWER on IntegriCloud