diff options
| author | Chris Buechler <cmb@pfsense.org> | 2016-07-17 23:18:57 -0500 |
|---|---|---|
| committer | Chris Buechler <cmb@pfsense.org> | 2016-07-17 23:18:57 -0500 |
| commit | a46e0d747e2f295a19708b2eed04e99d0ce1d634 (patch) | |
| tree | 76ea0257e94867e76e573f00fd337f6990fa5a03 /src/etc | |
| parent | 4d55ef968ba2ed3a080053e879121cb2b33dcf3f (diff) | |
| download | pfsense-a46e0d747e2f295a19708b2eed04e99d0ce1d634.zip pfsense-a46e0d747e2f295a19708b2eed04e99d0ce1d634.tar.gz | |
Allow AES-GCM for P1 where using IKEv2. Ticket #5990
Diffstat (limited to 'src/etc')
| -rw-r--r-- | src/etc/inc/ipsec.inc | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/etc/inc/ipsec.inc b/src/etc/inc/ipsec.inc index f60e639..a77e485 100644 --- a/src/etc/inc/ipsec.inc +++ b/src/etc/inc/ipsec.inc @@ -101,6 +101,9 @@ $ipsec_idhandling = array( global $p1_ealgos; $p1_ealgos = array( 'aes' => array('name' => 'AES', 'keysel' => array('lo' => 128, 'hi' => 256, 'step' => 64)), + 'aes128gcm' => array('name' => 'AES128-GCM', 'keysel' => array('lo' => 64, 'hi' => 128, 'step' => 32)), + 'aes192gcm' => array('name' => 'AES192-GCM', 'keysel' => array('lo' => 64, 'hi' => 128, 'step' => 32)), + 'aes256gcm' => array('name' => 'AES256-GCM', 'keysel' => array('lo' => 64, 'hi' => 128, 'step' => 32)), 'blowfish' => array('name' => 'Blowfish', 'keysel' => array('lo' => 128, 'hi' => 256, 'step' => 64)), '3des' => array('name' => '3DES'), 'cast128' => array('name' => 'CAST128') |
