From: Guus Sliepen <guus@tinc-vpn.org>
Date: Sat, 29 Oct 2016 13:24:34 +0000 (+0200)
Subject: Use AES256 and SHA256 by default, also for the meta-connections.
X-Git-Tag: release-1.0.30~6
X-Git-Url: http://www.tinc-vpn.org/git/browse?a=commitdiff_plain;h=a85864809febde02687b52dc2931ac4505f57067;hp=a85864809febde02687b52dc2931ac4505f57067;p=tinc

Use AES256 and SHA256 by default, also for the meta-connections.

At the start of the decade, there were still distributions that shipped
with versions of OpenSSL that did not support these algorithms. By now
everyone should support them. The old defaults were Blowfish and SHA1,
both of which are not considered secure anymore.

The meta-protocol now always uses AES in OFB mode, but the key length
will adapt to the one specified by the Cipher option. The digest for the
meta-protocol is hardcoded to SHA256.
---