openstack/tripleo-docs
Code Issues Proposed changes

Fix IPSec docs on how to change the encryption algorithm

Browse Source 
The variable documented didn't merge, and IpsecVars is going to be used
in favor of it.

Change-Id: Ibbfad62f951c5574a13a581fcbecbb959d7eba24
Depends-On: Ie6ef4aa05567c739884c1d402fc59eea80b31506
This commit is contained in:
Juan Antonio Osorio Robles 2018-01-31 09:46:08 +02:00
parent dd0ccf847a
commit 6713b5d81b
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
doc/source/install/advanced_deployment/ipsec.rst
View File

@ -94,11 +94,18 @@ To change the default encryption algorithm, you can use an environment file
that looks as follows::
parameter_defaults:
IPSECPhase2Alg: 'aes_gcm256-null'
IpsecVars:
ipsec_algorithm: 'aes_gcm256-null'
The ``IpsecVars`` option is able to change any parameter in the tripleo-ipsec
ansible role.
.. note:: For more information on the algorithms that Libreswan suppports,
please check the `Libreswan documentation`_
.. note:: For more information on the available parameters, check the README
file in the `tripleo-ipsec repository`_.
Verification
------------
@ -162,3 +169,4 @@ deployment is done, you'll need to do several things:
.. _Libreswan: https://libreswan.org/
.. _Libreswan documentation: https://libreswan.org/man/ipsec.conf.5.html
.. _Libreswan wiki entry on the subject: https://libreswan.org/wiki/How_to_read_status_output
.. _tripleo-ipsec repository: https://github.com/openstack/tripleo-ipsec/blob/master/README.md