remove IPsec SKIPJACK support...

John-Mark Gurney jmg at funkthat.com
Tue Jul 28 17:23:59 UTC 2015


Daniel Plominski wrote this message on Tue, Jul 28, 2015 at 13:34 +0200:
> instead of code to remove it is a better idea manuals to revise, people
> depend on old recommendations like
> https://www.freebsd.org/doc/handbook/ipsec.html

Thanks, I have at least removed the inclusion of des from the cipher
suite...

If you'd like to generate a patch to update the section w/ references
to the below, that would be welcome, and I'll make sure that the
changes git committed..

> would be better:
> https://blog.plitc.eu/2014/freebsd-10-ipv4-vpn-relay-ipsec-entryopenvpn-middleopenvpn-exit-node-mit-jails/
> 
> or the racoon example from:
> https://blog.plitc.eu/2014/freebsd-10-ipv4-ipsec-net-to-net-vpn-in-der-jail/
> 
> best regards

-- 
  John-Mark Gurney				Voice: +1 415 225 5579

     "All that I will do, has been done, All that I have, has not."


More information about the freebsd-net mailing list