summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorBruno Thomsen <bruno.thomsen@gmail.com>2015-05-12 22:44:45 +0200
committerBruno Thomsen <bruno.thomsen@gmail.com>2015-05-12 22:44:45 +0200
commitc55ec98a426a5654699d24d0ae00cb8b03f01933 (patch)
treec39eae9cb932a43caf2791d2e68a99bacbb915f5
parent7b8268640e1e703a6bdf082b09c116571176eb28 (diff)
downloadpfsense-c55ec98a426a5654699d24d0ae00cb8b03f01933.zip
pfsense-c55ec98a426a5654699d24d0ae00cb8b03f01933.tar.gz
ipsec: IKEv2 Diffie-Hellman ECC Brainpool support
Use of ECC Brainpool curves for IKEv2 is define in RFC6954. Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
-rw-r--r--etc/inc/ipsec.inc5
1 files changed, 4 insertions, 1 deletions
diff --git a/etc/inc/ipsec.inc b/etc/inc/ipsec.inc
index 2f39256..17b2153 100644
--- a/etc/inc/ipsec.inc
+++ b/etc/inc/ipsec.inc
@@ -113,7 +113,10 @@ $p1_dhgroups = array(
21 => '21 (nist ecp521)',
22 => '22 (1024(sub 160) bit)',
23 => '23 (2048(sub 224) bit)',
- 24 => '24 (2048(sub 256) bit)'
+ 24 => '24 (2048(sub 256) bit)',
+ 28 => '28 (brainpool ecp256)',
+ 29 => '29 (brainpool ecp384)',
+ 30 => '30 (brainpool ecp512)'
);
global $p2_halgos;
OpenPOWER on IntegriCloud