From e404916e033ff354844fe7ac92fd395247d46cc4 Mon Sep 17 00:00:00 2001
From: Bill Nottingham <notting@redhat.com>
Date: Thu, 9 Aug 2007 15:10:46 +0000
Subject: add support for overriding IKE dh group (#251506,
 <stijn.tintel@x-tend.be>)

---
 sysconfig.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'sysconfig.txt')

diff --git a/sysconfig.txt b/sysconfig.txt
index 19d329b3..0be8a84c 100644
--- a/sysconfig.txt
+++ b/sysconfig.txt
@@ -858,10 +858,11 @@ Files in /etc/sysconfig/network-scripts/
 
    Automatic keying:
 
+     IKE_DHGROUP=<number> (defaults to 2)
      IKE_METHOD=PSK|X509|GSSAPI
          PSK=preshared keys (shared secret)
          X509=X.509 certificates
-         GSSAPI=GSSAPI authentication
+         GSSPI=GSSAPI authentication
      IKE_PSK=preshared key for this connection
      IKE_CERTFILE=our certificate file name for X509 IKE
        IKE_PEER_CERTFILE=peer public cert filename for X509 IKE
-- 
cgit