From 49ae400d37afe92d27c767e7cb1f17988acffacb Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Wed, 19 Jul 2017 21:56:48 +0200 Subject: [PATCH] securiy-policies: Enhance system policy to support elliptic curves Signed-off-by: Michael Tremer --- config/vpn/security-policies/system | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/vpn/security-policies/system b/config/vpn/security-policies/system index accf8a2c..f2120a22 100644 --- a/config/vpn/security-policies/system +++ b/config/vpn/security-policies/system @@ -1,7 +1,7 @@ KEY_EXCHANGE="ikev2" CIPHER="AES256-GCM128 AES192-GCM128 AES128-GCM128 AES256-CBC AES192-CBC AES128-CBC" INTEGRITY="SHA512 SHA384 SHA256" -GROUP_TYPE="MODP8192 MODP4096 MODP2048" +GROUP_TYPE="MODP8192 MODP6144 MODP4096 MODP2048 ECP521 ECP384 ECP256 ECP224 ECP192 CURVE25519" LIFETIME="28800" PFS="on" COMPRESSION="on" -- 2.39.2