mirror of
https://github.com/neocturne/fastd.git
synced 2025-05-15 12:45:09 +02:00
Enable secure handshakes by default
This commit is contained in:
parent
06eae18f7d
commit
4d77b7247f
3 changed files with 1 additions and 5 deletions
|
@ -64,6 +64,7 @@ static void default_config(fastd_config_t *conf) {
|
||||||
conf->mtu = 1500;
|
conf->mtu = 1500;
|
||||||
conf->mode = MODE_TAP;
|
conf->mode = MODE_TAP;
|
||||||
|
|
||||||
|
conf->secure_handshakes = true;
|
||||||
conf->drop_caps = DROP_CAPS_ON;
|
conf->drop_caps = DROP_CAPS_ON;
|
||||||
|
|
||||||
conf->protocol = &fastd_protocol_ec25519_fhmqvc;
|
conf->protocol = &fastd_protocol_ec25519_fhmqvc;
|
||||||
|
@ -573,9 +574,6 @@ void fastd_config_check(fastd_context_t *ctx, fastd_config_t *conf) {
|
||||||
fastd_config_method(ctx, conf, "null");
|
fastd_config_method(ctx, conf, "null");
|
||||||
}
|
}
|
||||||
|
|
||||||
if (!conf->secure_handshakes_set)
|
|
||||||
pr_warn(ctx, "`secure handshakes' not set, please read the documentation about this option; defaulting to no");
|
|
||||||
|
|
||||||
configure_user(ctx, conf);
|
configure_user(ctx, conf);
|
||||||
configure_methods(ctx, conf);
|
configure_methods(ctx, conf);
|
||||||
}
|
}
|
||||||
|
|
|
@ -231,7 +231,6 @@ drop_capabilities_enabled:
|
||||||
|
|
||||||
secure_handshakes:
|
secure_handshakes:
|
||||||
boolean {
|
boolean {
|
||||||
conf->secure_handshakes_set = true;
|
|
||||||
conf->secure_handshakes = $1;
|
conf->secure_handshakes = $1;
|
||||||
}
|
}
|
||||||
;
|
;
|
||||||
|
|
|
@ -174,7 +174,6 @@ struct fastd_config {
|
||||||
uint32_t packet_mark;
|
uint32_t packet_mark;
|
||||||
bool forward;
|
bool forward;
|
||||||
fastd_tristate_t pmtu;
|
fastd_tristate_t pmtu;
|
||||||
bool secure_handshakes_set;
|
|
||||||
bool secure_handshakes;
|
bool secure_handshakes;
|
||||||
|
|
||||||
fastd_drop_caps_t drop_caps;
|
fastd_drop_caps_t drop_caps;
|
||||||
|
|
Loading…
Add table
Reference in a new issue