ipsec: added ikev2 dh group 31 / curve 25519

curve 25519 is supported in strongswan 5.7.1 and newer
This commit is contained in:
Peter Stehlin 2019-03-25 10:31:51 +01:00 committed by Franco Fichtner
parent be9a1c94ab
commit 90507bec18
5 changed files with 5 additions and 0 deletions

View File

@ -618,6 +618,7 @@ function ipsec_convert_to_modp($index): string
28 => 'ecp256bp',
29 => 'ecp384bp',
30 => 'ecp512bp',
31 => 'curve25519',
];
if (!array_key_exists($index, $map)) {

1
src/www/vpn_ipsec.php Normal file → Executable file
View File

@ -206,6 +206,7 @@ $dhgroups = array(
28 => '28 (Brainpool EC 256 bits)',
29 => '29 (Brainpool EC 384 bits)',
30 => '30 (Brainpool EC 512 bits)',
31 => '31 (Elliptic Curve 25519)',
);
?>

1
src/www/vpn_ipsec_mobile.php Normal file → Executable file
View File

@ -524,6 +524,7 @@ endfor; ?>
28 => '28 (Brainpool EC 256 bits)',
29 => '29 (Brainpool EC 384 bits)',
30 => '30 (Brainpool EC 512 bits)',
31 => '31 (Elliptic Curve 25519)',
);
foreach ($p2_dhgroups as $keygroup => $keygroupname): ?>
<option value="<?=$keygroup;

1
src/www/vpn_ipsec_phase1.php Normal file → Executable file
View File

@ -984,6 +984,7 @@ endforeach; ?>
28 => '28 (Brainpool EC 256 bits)',
29 => '29 (Brainpool EC 384 bits)',
30 => '30 (Brainpool EC 512 bits)',
31 => '31 (Elliptic Curve 25519)',
);
foreach ($p1_dhgroups as $keygroup => $keygroupname):
?>

1
src/www/vpn_ipsec_phase2.php Normal file → Executable file
View File

@ -744,6 +744,7 @@ endif; ?>
28 => '28 (Brainpool EC 256 bits)',
29 => '29 (Brainpool EC 384 bits)',
30 => '30 (Brainpool EC 512 bits)',
31 => '31 (Elliptic Curve 25519)',
);
foreach ($p2_dhgroups as $keygroup => $keygroupname): ?>
<option value="<?=$keygroup;?>" <?= $keygroup == $pconfig['pfsgroup'] ? "selected=\"selected\"" : "";?>>