From 23458655ac5addbb68c1872df82a537404105e70 Mon Sep 17 00:00:00 2001 From: hwdsl2 Date: Sun, 4 Nov 2018 00:59:01 -0500 Subject: [PATCH] Update IKEv2 docs - Add "pfs=no" to fix IKEv2 disconnect issues (at 8 mins) on iOS/macOS - Replace "fragmentation" with "ike-frag" for compatibility - Fixes #474 - Ref: https://github.com/libreswan/libreswan/issues/222 - Ref: http://www.openradar.appspot.com/29821241 --- docs/ikev2-howto-zh.md | 3 ++- docs/ikev2-howto.md | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/ikev2-howto-zh.md b/docs/ikev2-howto-zh.md index cdf92b9..04cc4d8 100644 --- a/docs/ikev2-howto-zh.md +++ b/docs/ikev2-howto-zh.md @@ -55,7 +55,8 @@ Libreswan 支持通过使用 RSA 签名算法的 X.509 Machine Certificates 来 auto=add ikev2=insist rekey=no - fragmentation=yes + pfs=no + ike-frag=yes ike=aes256-sha2,aes128-sha2,aes256-sha1,aes128-sha1,aes256-sha2;modp1024,aes128-sha1;modp1024 phase2alg=aes_gcm-null,aes256-sha2,aes128-sha2,aes256-sha1,aes128-sha1 EOF diff --git a/docs/ikev2-howto.md b/docs/ikev2-howto.md index 2e5261e..2194fc5 100644 --- a/docs/ikev2-howto.md +++ b/docs/ikev2-howto.md @@ -55,7 +55,8 @@ Before continuing, make sure you have successfully