mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add IPsec DH/PFS groups 25/26/27. Implements #9757

Browse Source
This commit is contained in:
jim-p 2019-09-13 11:02:44 -04:00
parent 49967ae74a
commit 21bee0287c
2 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/etc/inc/ipsec.inc
View File

@ -163,6 +163,9 @@ $p1_dhgroups = array(
22 => '22 (1024(sub 160) bit)',
23 => '23 (2048(sub 224) bit)',
24 => '24 (2048(sub 256) bit)',
25 => '25 (nist ecp192)',
26 => '26 (nist ecp224)',
27 => '27 (brainpool ecp224)',
28 => '28 (brainpool ecp256)',
29 => '29 (brainpool ecp384)',
30 => '30 (brainpool ecp512)',
@ -229,6 +232,9 @@ $p2_pfskeygroups = array(
22 => gettext('22 (1024(sub 160) bit)'),
23 => gettext('23 (2048(sub 224) bit)'),
24 => gettext('24 (2048(sub 256) bit)'),
25 => gettext('25 (nist ecp192)'),
26 => gettext('26 (nist ecp224)'),
27 => gettext('27 (brainpool ecp224)'),
28 => gettext('28 (brainpool ecp256)'),
29 => gettext('29 (brainpool ecp384)'),
30 => gettext('30 (brainpool ecp512)'),

9
src/etc/inc/vpn.inc
View File

@ -107,6 +107,15 @@ function vpn_ipsec_convert_to_modp($index) {
case '24':
$conversion = "modp2048s256";
break;
case '25':
$conversion = "ecp192";
break;
case '26':
$conversion = "ecp224";
break;
case '27':
$conversion = "ecp224bp";
break;
case '28':
$conversion = "ecp256bp";
break;