# If the cipher is builtin the <module path> maybe omitted.
#
[Cipher]
-twofish:../lib/silcsim/modules/twofish.sim.so:16:16
-rc6:../lib/silcsim/modules/rc6.sim.so:16:16
-mars:../lib/silcsim/modules/mars.sim.so:16:16
-none:../lib/silcsim/modules/none.sim.so:0:0
+aes-256-cbc:/usr/local/silc/modules/aes.sim.so:32:16
+aes-192-cbc:/usr/local/silc/modules/aes.sim.so:24:16
+aes-128-cbc:/usr/local/silc/modules/aes.sim.so:16:16
+twofish-256-cbc:/usr/local/silc/modules/twofish.sim.so:32:16
+twofish-192-cbc:/usr/local/silc/modules/twofish.sim.so:24:16
+twofish-128-cbc:/usr/local/silc/modules/twofish.sim.so:16:16
+mars-256-cbc:/usr/local/silc/modules/mars.sim.so:32:16
+mars-192-cbc:/usr/local/silc/modules/mars.sim.so:24:16
+mars-128-cbc:/usr/local/silc/modules/mars.sim.so:16:16
+none:/usr/local/silc/modules/none.sim.so:0:0
#
# Configured hash functions.
#
# If the hash function is builtin the <module path> maybe omitted.
#
-[HashFunction]
-md5::64:16
+[Hash]
sha1::64:20
+md5::64:16
#
-# Configured PKCS.
+# Configured HMAC functions. The hash function used in the HMAC must
+# configured to the [hash] section.
+#
+# Format: <name>:<hash name>:<mac length>
+#
+[hmac]
+hmac-sha1-96:sha1:12
+hmac-md5-96:md5:12
+hmac-sha1:sha1:20
+hmac-md5:md5:16
+
#
-# Format: <name>:<module path>:<key length>
+# Configured PKCS.
#
-# NOTE: <module path> must be omitted as PKCS cannot be modules currently.
+# Format: <name>
#
-#[PKCS]
-#rsa::1024
-#dss::1024
+[PKCS]
+rsa
#
# Run SILC server as specific user and group. The server must be initially
[ServerInfo]
lassi.kuo.fi.ssh.com:10.2.1.6:Kuopio, Finland:706
+#
+# Server keys
+#
+# Format: +<public key>:<private key>
+#
+[ServerKeys]
+/etc/silc/silcd.pub:/etc/silc/silcd.prv
+
#
# Listenning ports.
#
# fatallogile:<path>:<max byte size>
#
[Logging]
-infologfile:silcd.log:10000
-#warninglogfile:/var/log/silcd_warning.log:10000
-#errorlogfile:ERROR.log:10000
-#fatallogfile:/var/log/silcd_error.log:
+infologfile:/usr/local/silc/logs/silcd.log:10000
+#warninglogfile:/usr/local/silc/logs/silcd_warning.log:10000
+#errorlogfile:/usr/local/silc/logs/error.log:10000
+#fatallogfile:/usr/local/silc/logs/silcd_error.log:
#
# Connection classes.
#
# Format: <remote host>:<auth method>:<auth data>:<port>:<class>
#
+# The <auth data> is either passphrase or file path to the public key
+# file.
+#
[ClientConnection]
-:::1333:1
+:::706:1
#
# Configured server administrator connections
#
-# Format: <host>:<auth method>:<auth data>:<nickname hash>:<class>
+# Format: <host>:<username>:<nickname>:<auth method>:<auth data>
+#
+# The <auth data> is either passphrase or file path to the public key
+# file.
#
[AdminConnection]
-10.2.1.199:passwd:veryscret:XXX:1
+10.2.1.199:priikone:pekka:passwd:veryscret
#
# Configured server connections.
#
# Format: <remote host>:<auth method>:<auth data>:<port>:<version ID>:<vlass>
#
+# The <auth data> is either passphrase or file path to the public key
+# file.
+#
[ServerConnection]
10.2.1.7:passwd:veryscret:706:1:1
#
# Format: <remote host>:<auth method>:<auth data>:<port>:<version ID>:<class>:<initiator>
#
+# The <auth data> is either passphrase or file path to the public key
+# file.
+#
[RouterConnection]
#10.2.1.100:passwd:veryverysecret:706:1:1:1
#
# These connections are denied to connect our server.
#
-# Format: <remote host/nickname>:<time interval>:<comment>:<port>
+# Format: <remote host>:<port>:<comment>
#
[DenyConnection]
-
-#
-# Redirected client connections.
-#
-# Clients will be redirected to these servers when our server is full.
-#
-# Format: <remote host>:<port>
-#
-[RedirectClient]
+#10.2.1.99:0:Your connection has been denied