Removed %any from ipsec.secrets

Having %any in ipsec.secrets appears to allow any username to log in with a valid password, which is not intended
diegopeleteiro · Jun 3, 2018 · 13a78c7 · 13a78c7
1 parent 87a5ae2
commit 13a78c7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/setup.sh b/setup.sh
@@ -243,7 +243,7 @@ conn roadwarrior
 " > /etc/ipsec.conf
 
 echo "${VPNHOST} : RSA \"privkey.pem\"
-${VPNUSERNAME} %any : EAP \""${VPNPASSWORD}"\"
+${VPNUSERNAME} : EAP \""${VPNPASSWORD}"\"
 " > /etc/ipsec.secrets
 
 ipsec restart