From 3f45cc99ffb2673b7ccf01af742ca1266d83ea32 Mon Sep 17 00:00:00 2001
From: jim-p <jimp@netgate.com>
Date: Fri, 17 May 2019 11:44:55 -0400
Subject: [PATCH] Add in DH 32, a patch for strongSwan will be in soon to test
 with. Issue #9531

---
 src/etc/inc/ipsec.inc | 2 ++
 src/etc/inc/vpn.inc   | 3 +++
 2 files changed, 5 insertions(+)

diff --git a/src/etc/inc/ipsec.inc b/src/etc/inc/ipsec.inc
index 8c7197e19c..59d68e0796 100644
--- a/src/etc/inc/ipsec.inc
+++ b/src/etc/inc/ipsec.inc
@@ -165,6 +165,7 @@ $p1_dhgroups = array(
 	29 => '29 (brainpool ecp384)',
 	30 => '30 (brainpool ecp512)',
 	31 => '31 (Elliptic Curve 25519, 256 bit)',
+	32 => '32 (Elliptic Curve 25519, 448 bit)',
 );
 
 global $p2_halgos;
@@ -230,6 +231,7 @@ $p2_pfskeygroups = array(
 	29 => gettext('29 (brainpool ecp384)'),
 	30 => gettext('30 (brainpool ecp512)'),
 	31 => gettext('31 (Elliptic Curve 25519, 256 bit)'),
+	32 => gettext('32 (Elliptic Curve 25519, 448 bit)'),
 );
 
 function ipsec_enabled() {
diff --git a/src/etc/inc/vpn.inc b/src/etc/inc/vpn.inc
index a7e59ac8f2..10ab02ec23 100644
--- a/src/etc/inc/vpn.inc
+++ b/src/etc/inc/vpn.inc
@@ -117,6 +117,9 @@ function vpn_ipsec_convert_to_modp($index) {
 		case '31':
 			$conversion = "curve25519";
 			break;
+		case '32':
+			$conversion = "curve448";
+			break;
 	}
 
 	return $conversion;