From: Michael Tremer <michael.tremer@ipfire.org>
Date: Mon, 8 Apr 2013 12:42:44 +0000 (+0200)
Subject: ipsec: Set IKE/IPsec lifetime to strongswan defaults.
X-Git-Tag: v2.13-core68~2^2~34^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=0cf124ab691a5502923ef69627b96069580861da;p=people%2Fpmueller%2Fipfire-2.x.git

ipsec: Set IKE/IPsec lifetime to strongswan defaults.

As suggested by Tom Rymes:
https://bugzilla.ipfire.org/show_bug.cgi?id=10346
---

diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi
index 161df4d6e6..bda49a3e7b 100644
--- a/html/cgi-bin/vpnmain.cgi
+++ b/html/cgi-bin/vpnmain.cgi
@@ -1832,11 +1832,11 @@ END
 	$cgiparams{'IKE_ENCRYPTION'} = 'aes256|aes192|aes128|3des';	#[18];
 	$cgiparams{'IKE_INTEGRITY'}  = 'sha2_256|sha|md5';	#[19];
 	$cgiparams{'IKE_GROUPTYPE'}  = '8192|6144|4096|3072|2048|1536|1024';		#[20];
-	$cgiparams{'IKE_LIFETIME'}   = '1';		#[16];
+	$cgiparams{'IKE_LIFETIME'}   = '3';		#[16];
 	$cgiparams{'ESP_ENCRYPTION'} = 'aes256|aes192|aes128|3des';	#[21];
 	$cgiparams{'ESP_INTEGRITY'}  = 'sha2_256|sha1|md5';	#[22];
 	$cgiparams{'ESP_GROUPTYPE'}  = '';		#[23];
-	$cgiparams{'ESP_KEYLIFE'}    = '8';		#[17];
+	$cgiparams{'ESP_KEYLIFE'}    = '1';		#[17];
 	$cgiparams{'COMPRESSION'}    = 'on';		#[13];
 	$cgiparams{'ONLY_PROPOSED'}  = 'off';		#[24];
 	$cgiparams{'PFS'}	     = 'on';		#[28];