aboutsummaryrefslogtreecommitdiffstats
path: root/sysconfig
diff options
context:
space:
mode:
authorBill Nottingham <notting@redhat.com>2007-08-09 15:10:46 +0000
committerBill Nottingham <notting@redhat.com>2007-08-09 15:10:46 +0000
commite404916e033ff354844fe7ac92fd395247d46cc4 (patch)
treefe7fac30b1446ce9f604052e203d18f2e3f808f2 /sysconfig
parent3ca1d6ddd701525ab93ff9fd73701b44081da053 (diff)
downloadinitscripts-e404916e033ff354844fe7ac92fd395247d46cc4.tar
initscripts-e404916e033ff354844fe7ac92fd395247d46cc4.tar.gz
initscripts-e404916e033ff354844fe7ac92fd395247d46cc4.tar.bz2
initscripts-e404916e033ff354844fe7ac92fd395247d46cc4.tar.xz
initscripts-e404916e033ff354844fe7ac92fd395247d46cc4.zip
add support for overriding IKE dh group (#251506, <stijn.tintel@x-tend.be>)
Diffstat (limited to 'sysconfig')
-rwxr-xr-xsysconfig/network-scripts/ifup-ipsec7
1 files changed, 4 insertions, 3 deletions
diff --git a/sysconfig/network-scripts/ifup-ipsec b/sysconfig/network-scripts/ifup-ipsec
index fc650daf..caef52d0 100755
--- a/sysconfig/network-scripts/ifup-ipsec
+++ b/sysconfig/network-scripts/ifup-ipsec
@@ -102,6 +102,7 @@ if [ "$KEYING" = "manual" ]; then
[ -n "$KEY_ESP_IN" ] && SPD_ESP_IN=yes
[ -n "$KEY_ESP_OUT" ] && SPD_ESP_OUT=yes
else
+ [ -z "$IKE_DHGROUP" ] && IKE_DH=2
[ -z "$AH_PROTO" ] && AH_PROTO=sha1
[ -z "$ESP_PROTO" ] && ESP_PROTO=3des
@@ -187,7 +188,7 @@ EOF
encryption_algorithm $ESP_PROTO;
hash_algorithm $AH_PROTO;
authentication_method pre_shared_key;
- dh_group 2 ;
+ dh_group $IKE_DHGROUP;
}
}
EOF
@@ -209,7 +210,7 @@ EOF
encryption_algorithm $ESP_PROTO;
hash_algorithm $AH_PROTO;
authentication_method rsasig;
- dh_group 2;
+ dh_group $IKE_DHGROUP;
}
}
EOF
@@ -221,7 +222,7 @@ EOF
encryption_algorithm $ESP_PROTO;
hash_algorithm $AH_PROTO;
authentication_method gssapi_krb;
- dh_group 2 ;
+ dh_group $IKE_DHGROUP;
}
}
EOF