From: Michael Tremer <michael.tremer@ipfire.org>
Date: Wed, 19 Jul 2017 19:56:48 +0000 (+0200)
Subject: securiy-policies: Enhance system policy to support elliptic curves
X-Git-Tag: 009~134
X-Git-Url: http://git.ipfire.org/?p=people%2Fms%2Fnetwork.git;a=commitdiff_plain;h=49ae400d37afe92d27c767e7cb1f17988acffacb

securiy-policies: Enhance system policy to support elliptic curves

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/vpn/security-policies/system b/config/vpn/security-policies/system
index accf8a2c..f2120a22 100644
--- a/config/vpn/security-policies/system
+++ b/config/vpn/security-policies/system
@@ -1,7 +1,7 @@
 KEY_EXCHANGE="ikev2"
 CIPHER="AES256-GCM128 AES192-GCM128 AES128-GCM128 AES256-CBC AES192-CBC AES128-CBC"
 INTEGRITY="SHA512 SHA384 SHA256"
-GROUP_TYPE="MODP8192 MODP4096 MODP2048"
+GROUP_TYPE="MODP8192 MODP6144 MODP4096 MODP2048 ECP521 ECP384 ECP256 ECP224 ECP192 CURVE25519"
 LIFETIME="28800"
 PFS="on"
 COMPRESSION="on"