diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2013-04-22 15:39:41 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2013-05-03 16:02:39 +0200 |
| commit | 740aedfec11ee2f67298a8091a16907cbd6eee30 (patch) | |
| tree | 279cf5fdb8b6171d73af1b5d550daef0ecc0c442 /src/frontends/android/jni/libandroidbridge/backend/android_service.c | |
| parent | 051fc25d926399b65d0b0caf95d1f6a6acb26e2a (diff) | |
| download | strongswan-740aedfec11ee2f67298a8091a16907cbd6eee30.tar.bz2 strongswan-740aedfec11ee2f67298a8091a16907cbd6eee30.tar.xz | |
android: Use stronger ESP proposal including AES-GCM
Diffstat (limited to 'src/frontends/android/jni/libandroidbridge/backend/android_service.c')
| -rw-r--r-- | src/frontends/android/jni/libandroidbridge/backend/android_service.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/frontends/android/jni/libandroidbridge/backend/android_service.c b/src/frontends/android/jni/libandroidbridge/backend/android_service.c index 302f732a8..b22186580 100644 --- a/src/frontends/android/jni/libandroidbridge/backend/android_service.c +++ b/src/frontends/android/jni/libandroidbridge/backend/android_service.c @@ -568,6 +568,12 @@ static job_requeue_t initiate(private_android_service_t *this) /* create an ESP proposal with the algorithms currently supported by * libipsec, no PFS for now */ child_cfg->add_proposal(child_cfg, proposal_create_from_string(PROTO_ESP, + "aes128gcm16-aes256gcm16")); + child_cfg->add_proposal(child_cfg, proposal_create_from_string(PROTO_ESP, + "aes128-sha256")); + child_cfg->add_proposal(child_cfg, proposal_create_from_string(PROTO_ESP, + "aes256-sha384")); + child_cfg->add_proposal(child_cfg, proposal_create_from_string(PROTO_ESP, "aes128-aes192-aes256-sha1-sha256-sha384-sha512")); ts = traffic_selector_create_from_cidr("0.0.0.0/0", 0, 0, 65535); child_cfg->add_traffic_selector(child_cfg, TRUE, ts); |