andrei/amnezia-client
1
0
Fork 0
mirror of https://github.com/amnezia-vpn/amnezia-client.git synced 2026-06-24 02:00:24 +07:00
Code Issues Packages Projects Releases 10 Wiki Activity

Enable PFS for Windows IKEv2

Browse Source
This commit is contained in:
Mykola Baibuz
2025-01-27 22:39:18 +02:00
parent fbbba648c4
commit b173dcaa17
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
client/protocols/ikev2_vpn_protocol_windows.cpp
+1 -1
View File
@@ -238,7 +238,7 @@ ErrorCode Ikev2Protocol::start()
"-CipherTransformConstants GCMAES128 " "-CipherTransformConstants GCMAES128 "
"-EncryptionMethod AES256 " "-EncryptionMethod AES256 "
"-IntegrityCheckMethod SHA256 " "-IntegrityCheckMethod SHA256 "
"-PfsGroup None " "-PfsGroup PFS2048 "
"-DHGroup Group14 " "-DHGroup Group14 "
"-PassThru -Force\"") "-PassThru -Force\"")
.arg(tunnelName()); .arg(tunnelName());
client/server_scripts/ipsec/configure_container.sh
+5 -5
View File
@@ -33,14 +33,14 @@ conn shared
right=%any right=%any
encapsulation=yes encapsulation=yes
authby=secret authby=secret
pfs=no pfs=yes
rekey=no rekey=no
keyingtries=5 keyingtries=5
dpddelay=30 dpddelay=30
dpdtimeout=120 dpdtimeout=120
dpdaction=clear dpdaction=clear
ikev2=never ikev2=never
ike=aes256-sha2,aes128-sha2,aes256-sha1,aes128-sha1,aes256-sha2;modp1024,aes128-sha1;modp1024 ike=aes256-sha2,aes128-sha2,aes256-sha1,aes128-sha1,aes256-sha2;modp2048,aes128-sha1;modp2048
phase2alg=aes_gcm-null,aes128-sha1,aes256-sha1,aes256-sha2_512,aes128-sha2,aes256-sha2 phase2alg=aes_gcm-null,aes128-sha1,aes256-sha1,aes256-sha2_512,aes128-sha2,aes256-sha2
ikelifetime=24h ikelifetime=24h
salifetime=24h salifetime=24h
@@ -244,9 +244,9 @@ conn ikev2-cp
auto=add auto=add
ikev2=insist ikev2=insist
rekey=no rekey=no
pfs=no pfs=yes
ike=aes256-sha2,aes128-sha2,aes256-sha1,aes128-sha1 ike=aes256-sha2,aes128-sha2,aes256-sha1,aes128-sha1,aes256-sha2;modp2048,aes128-sha1;modp2048
phase2alg=aes_gcm-null,aes128-sha1,aes256-sha1,aes128-sha2,aes256-sha2 phase2alg=aes_gcm-null,aes128-sha1,aes256-sha1,aes256-sha2_512,aes128-sha2,aes256-sha2
ikelifetime=24h ikelifetime=24h
salifetime=24h salifetime=24h
encapsulation=yes encapsulation=yes