ipsec: add DH Group 2 for basic Azure VPN gateway compatibility

While insecure, this is the best possible proposal combination out
of the list provided by Microsoft: https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices#ike-phase-1-main-mode-parameters
This commit is contained in:
Stephan de Wit 2025-04-25 09:43:59 +02:00
parent a4124d7e99
commit 3c2ad5d6b3

View File

@ -122,6 +122,7 @@ class IPsecProposalField extends BaseListField
'aes128-sha1-modp2048' => 'aes128-sha1-modp2048 [DH14]',
'aes256-sha1-modp4096' => 'aes256-sha1-modp4096 [DH16]',
'aes256-sha1-ecp521' => 'aes256-sha1-ecp521 [DH21, NIST EC]',
'aes256-sha256-modp1024' => 'aes256-sha256-modp1024 [DH2]',
'aes256-sha512-modp1024' => 'aes256-sha512-modp1024 [DH2]',
'aes256-sha256' => 'aes256-sha256',
'null' => gettext('null (testing only, no encryption and no integrity checking!)')