From: Michael Tremer <michael.tremer@ipfire.org>
Date: Mon, 24 Jun 2019 12:28:12 +0000 (+0100)
Subject: security-policies: performance: Remove CBC ciphers
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=2cb783babd59716366984c8908e70285f23347f3;p=people%2Fms%2Fnetwork.git

security-policies: performance: Remove CBC ciphers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/vpn/security-policies/performance b/config/vpn/security-policies/performance
index 9b8e9436..b226d8db 100644
--- a/config/vpn/security-policies/performance
+++ b/config/vpn/security-policies/performance
@@ -1,4 +1,4 @@
-CIPHERS="CHACHA20-POLY1305 AES128-GCM128 AES128-CBC"
+CIPHERS="CHACHA20-POLY1305 AES128-GCM128"
 COMPRESSION="off"
 GROUP_TYPES="ECP521 ECP384 ECP256 ECP224 ECP192 CURVE25519"
 INTEGRITIES="SHA256"