diff options
| author | zsdc <taras@vyos.io> | 2020-03-11 15:16:12 +0200 |
|---|---|---|
| committer | zsdc <taras@vyos.io> | 2020-03-11 15:16:12 +0200 |
| commit | 2370ba1e8a769b30a64c815e0d4d2d2053bc8848 (patch) | |
| tree | b65bbdc57b88204b9ce052e9be34ab114b935e29 /scripts/vpn-config.pl | |
| parent | 9e7435826d97d1e603edb05efb89ece95887c0ba (diff) | |
| download | vyatta-cfg-vpn-2370ba1e8a769b30a64c815e0d4d2d2053bc8848.tar.gz vyatta-cfg-vpn-2370ba1e8a769b30a64c815e0d4d2d2053bc8848.zip | |
strongSwan: T2049: Extended list of cipher suites
The list of supported cipher suites actualized according to the:
https://wiki.strongswan.org/projects/strongswan/wiki/IKEv1CipherSuites
https://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites
Diffstat (limited to 'scripts/vpn-config.pl')
| -rwxr-xr-x | scripts/vpn-config.pl | 16 |
1 files changed, 15 insertions, 1 deletions
diff --git a/scripts/vpn-config.pl b/scripts/vpn-config.pl index 369e568..871a96a 100755 --- a/scripts/vpn-config.pl +++ b/scripts/vpn-config.pl @@ -1546,7 +1546,9 @@ EOS sub get_dh_cipher_result { my ($cipher) = @_; my $ciph_out; - if ($cipher eq '2' || $cipher eq 'dh-group2') { + if ($cipher eq '1' || $cipher eq 'dh-group1') { + $ciph_out = 'modp768'; + } elsif ($cipher eq '2' || $cipher eq 'dh-group2') { $ciph_out = 'modp1024'; } elsif ($cipher eq '5' || $cipher eq 'dh-group5') { $ciph_out = 'modp1536'; @@ -1576,6 +1578,18 @@ sub get_dh_cipher_result { $ciph_out = 'ecp192'; } elsif ($cipher eq '26' || $cipher eq 'dh-group26') { $ciph_out = 'ecp224'; + } elsif ($cipher eq '27' || $cipher eq 'dh-group27') { + $ciph_out = 'ecp224bp'; + } elsif ($cipher eq '28' || $cipher eq 'dh-group28') { + $ciph_out = 'ecp256bp'; + } elsif ($cipher eq '29' || $cipher eq 'dh-group29') { + $ciph_out = 'ecp384bp'; + } elsif ($cipher eq '30' || $cipher eq 'dh-group30') { + $ciph_out = 'ecp512bp'; + } elsif ($cipher eq '31' || $cipher eq 'dh-group31') { + $ciph_out = 'curve25519'; + } elsif ($cipher eq '32' || $cipher eq 'dh-group32') { + $ciph_out = 'curve448'; } else { $ciph_out = 'unknown'; } |