Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
24333 commits 8 branches 0 tags 65 MiB
Commit graph

4 commits

Author SHA1 Message Date
Philip Prindeville
ff33f4ccd3 strongswan: handle chacha20poly1305 as AEAD 
chacha20policy1305 is also an AEAD cipher, and hence does not
permit a hash algorithm.

Fixes issue #15397.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
 2021-04-13 12:46:07 -06:00
Philip Prindeville
c95fd69973 strongswan: fail on serious configuration errors 
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
 2021-04-13 12:46:07 -06:00
Philip Prindeville
210640d606 strongswan: drop subshell when possible 
A subshell caused by $(...) can't persistently modify globals as a
side-effect.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
 2021-04-13 12:45:57 -06:00
Philip Prindeville
f9d91f1f47 strongswan: migrate to swanctl configs 
Derived from the ipsec initd script, with the following changes:

(1) various code improvements, corrections (get rid of left/right
    updown scripts, since there's only one), etc;
(2) add reauth and fragmentation parameters;
(3) add x.509 certificate-based authentication;

and other minor changes.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
 2021-04-04 11:58:51 -06:00