remove IPsec SKIPJACK support...
John-Mark Gurney
jmg at funkthat.com
Tue Jul 28 17:23:59 UTC 2015
Daniel Plominski wrote this message on Tue, Jul 28, 2015 at 13:34 +0200:
> instead of code to remove it is a better idea manuals to revise, people
> depend on old recommendations like
> https://www.freebsd.org/doc/handbook/ipsec.html
Thanks, I have at least removed the inclusion of des from the cipher
suite...
If you'd like to generate a patch to update the section w/ references
to the below, that would be welcome, and I'll make sure that the
changes git committed..
> would be better:
> https://blog.plitc.eu/2014/freebsd-10-ipv4-vpn-relay-ipsec-entryopenvpn-middleopenvpn-exit-node-mit-jails/
>
> or the racoon example from:
> https://blog.plitc.eu/2014/freebsd-10-ipv4-ipsec-net-to-net-vpn-in-der-jail/
>
> best regards
--
John-Mark Gurney Voice: +1 415 225 5579
"All that I will do, has been done, All that I have, has not."
More information about the freebsd-net
mailing list