Perfect Forward Secrecy
The NetworkManager client on Linux supports VPNs with PFS, however, the GUI wizard doesn't allow it to be specified. The workaround for this is to open the gconf editor and go to:
/system/networking/connections/n/vpn
where "n" is the connection number for the VPN. Add a key titled "Perfect@32@Forward@32@Secrecy" of type "String". Then just specify the pfs: "nopfs" or "dh0" or such.
Thursday, August 20, 2009
Subscribe to:
Posts (Atom)