lucaspalomodevelop/opnsense-core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/opnsense-core.git synced 2026-03-13 00:07:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

ipsec: add DH Group 2 for basic Azure VPN gateway compatibility

Browse Source 
While insecure, this is the best possible proposal combination out
of the list provided by Microsoft: https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices#ike-phase-1-main-mode-parameters
This commit is contained in:
Stephan de Wit 2025-04-25 09:43:59 +02:00
parent a4124d7e99
commit 3c2ad5d6b3
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/opnsense/mvc/app/models/OPNsense/IPsec/FieldTypes/IPsecProposalField.php
View File

@ -122,6 +122,7 @@ class IPsecProposalField extends BaseListField
'aes128-sha1-modp2048' => 'aes128-sha1-modp2048 [DH14]',
'aes256-sha1-modp4096' => 'aes256-sha1-modp4096 [DH16]',
'aes256-sha1-ecp521' => 'aes256-sha1-ecp521 [DH21, NIST EC]',
'aes256-sha256-modp1024' => 'aes256-sha256-modp1024 [DH2]',
'aes256-sha512-modp1024' => 'aes256-sha512-modp1024 [DH2]',
'aes256-sha256' => 'aes256-sha256',
'null' => gettext('null (testing only, no encryption and no integrity checking!)')