Browse Source

fastd: Allow both aes128 ciphers we had in use everywhere.

Signed-off-by: Maximilian Wilhelm <max@sdn.clinic>
Maximilian Wilhelm 4 years ago
parent
commit
c4dba0bbe2
1 changed files with 3 additions and 1 deletions
  1. 3 1
      fastd/fastd.conf

+ 3 - 1
fastd/fastd.conf

@@ -8,8 +8,10 @@ interface "{{ site }}_{{ network }}";
 
 {%- if 'aes' in grains.cpu_flags and grains.oscodename not in [ "stretch" ] %}
 method "aes128-gcm";
+method "aes128-ctr+umac";
 {%- else %}
-#method "aes128-gcm";	# - Not supported by CPU on this machine 
+#method "aes128-gcm";		# - Not supported by CPU on this machine
+#method "aes128-ctr+umac";	# - Not supported by CPU on this machine
 {%- endif %}
 method "salsa2012+umac";