From 75756ab9c8f7da6899be16c2a1a2d206e6e9fd50 Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@pfsense.org>
Date: Tue, 4 Nov 2014 23:19:45 -0600
Subject: [PATCH] use a bit stronger of defaults in OpenVPN wizard

---
 usr/local/www/wizards/openvpn_wizard.xml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/usr/local/www/wizards/openvpn_wizard.xml b/usr/local/www/wizards/openvpn_wizard.xml
index 00ba90454..3233e29ed 100644
--- a/usr/local/www/wizards/openvpn_wizard.xml
+++ b/usr/local/www/wizards/openvpn_wizard.xml
@@ -661,6 +661,7 @@
 			<displayname>DH Parameters Length</displayname>
 			<name>dhparameters</name>
 			<type>select</type>
+			<value>2048</value>
 			<bindstofield>ovpnserver->step10->dhkey</bindstofield>
 			<options>
 				<option>
@@ -683,13 +684,14 @@
 			<type>select</type>
 			<displayname>Encryption Algorithm</displayname>
 			<bindstofield>ovpnserver->step10->crypto</bindstofield>
+			<value>AES-256-CBC</value>
 			<options>
 				<option>
 					<name>dummy</name>
 					<value>dummy</value>
 				</option>
 			</options>
-			<description>&lt;br/&gt;The method used to encrypt traffic between endpoints. This setting must match on the client and server side, but is otherwise set however you like. Certain algorithms will perform better on different hardware, depending on the availability of supported VPN accelerator chips.</description>
+			<description>&lt;br/&gt;The algorithm used to encrypt traffic between endpoints. This setting must match on the client and server side, but is otherwise set however you like. Certain algorithms will perform better on different hardware, depending on the availability of supported VPN accelerator chips.</description>
 		</field>
 		<field>
 			<name>digest</name>