diff options
| author | Chris Buechler <cmb@pfsense.org> | 2016-07-17 23:18:57 -0500 |
|---|---|---|
| committer | Chris Buechler <cmb@pfsense.org> | 2016-07-17 23:18:57 -0500 |
| commit | a46e0d747e2f295a19708b2eed04e99d0ce1d634 (patch) | |
| tree | 76ea0257e94867e76e573f00fd337f6990fa5a03 /src/usr | |
| parent | 4d55ef968ba2ed3a080053e879121cb2b33dcf3f (diff) | |
| download | pfsense-a46e0d747e2f295a19708b2eed04e99d0ce1d634.zip pfsense-a46e0d747e2f295a19708b2eed04e99d0ce1d634.tar.gz | |
Allow AES-GCM for P1 where using IKEv2. Ticket #5990
Diffstat (limited to 'src/usr')
| -rw-r--r-- | src/usr/local/www/vpn_ipsec_phase1.php | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/usr/local/www/vpn_ipsec_phase1.php b/src/usr/local/www/vpn_ipsec_phase1.php index 3bdfd38..a9fb081 100644 --- a/src/usr/local/www/vpn_ipsec_phase1.php +++ b/src/usr/local/www/vpn_ipsec_phase1.php @@ -391,6 +391,10 @@ if ($_POST) { $input_errors[] = gettext("Valid arguments for IKE type are v1, v2 or auto"); } + if (preg_match("/aes\d+gcm/", $_POST['ealgo']) && $_POST['iketype'] != "ikev2") { + $input_errors[] = gettext("Encryption Algorithm AES-GCM can only be used with IKEv2"); + } + if (!empty($_POST['ealgo']) && isset($config['system']['crypto_hardware'])) { if ($config['system']['crypto_hardware'] == "glxsb") { if ($_POST['ealgo'] == "aes" && $_POST['ealgo_keylen'] != "128") { |
