From f48f19063561639d65b76f241f17f0704ba69644 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Thu, 21 May 2020 11:13:56 +0200
Subject: macsec: T2023: remove gcm-aes-256 cipher type

Cipher type gcm-aes-256 is supported by Linux 4.19 but it is not available in
iproute2 4.19. We could backport it of course but the plan is to Upgrade to a
more recent 5.x series kernel anyway once all out-of-tree module issues are
resolved, mainly Intel QAT.

gcm-aes-256 support was added to iproute2 package with commit b16f5253233 ("Add
support for configuring MACsec gcm-aes-256 cipher type.") which made it into
the 5.2 release of iproute2.
---
 interface-definitions/interfaces-macsec.xml.in | 10 +++-------
 1 file changed, 3 insertions(+), 7 deletions(-)

(limited to 'interface-definitions')

diff --git a/interface-definitions/interfaces-macsec.xml.in b/interface-definitions/interfaces-macsec.xml.in
index 13448e758..f16760112 100644
--- a/interface-definitions/interfaces-macsec.xml.in
+++ b/interface-definitions/interfaces-macsec.xml.in
@@ -19,20 +19,16 @@
           #include <include/address-ipv4-ipv6.xml.i>
           <leafNode name="cipher">
             <properties>
-              <help>Cipher suite used (default: gcm-aes-128)</help>
+              <help>Cipher suite used</help>
               <completionHelp>
-                <list>gcm-aes-128 gcm-aes-256</list>
+                <list>gcm-aes-128</list>
               </completionHelp>
               <valueHelp>
                 <format>gcm-aes-128</format>
                 <description>Galois/Counter Mode of AES cipher with 128-bit key (default)</description>
               </valueHelp>
-              <valueHelp>
-                <format>gcm-aes-256</format>
-                <description>Galois/Counter Mode of AES cipher with 256-bit key</description>
-              </valueHelp>
               <constraint>
-                <regex>(gcm-aes-128|gcm-aes-256)</regex>
+                <regex>(gcm-aes-128)</regex>
               </constraint>
             </properties>
           </leafNode>
-- 
cgit v1.2.3