aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/plugins
diff options
context:
space:
mode:
authorThomas Egerer <thomas.egerer@secunet.com>2013-08-23 14:15:44 +0200
committerMartin Willi <martin@revosec.ch>2013-09-10 10:28:32 +0200
commit7d938be9e986a24b2ce3a8e2557213ece3adcacd (patch)
tree1118d32905eadd9cfb97c9c56770006cb4d09a41 /src/libcharon/plugins
parentec331a7dd633da57e46bd6e31edaf172104e3197 (diff)
downloadstrongswan-7d938be9e986a24b2ce3a8e2557213ece3adcacd.tar.bz2
strongswan-7d938be9e986a24b2ce3a8e2557213ece3adcacd.tar.xz
ikev1: For PFS prefer DH group from IKE_SA over first configured
If PFS is configured for a CHILD_SA first try to create a list of proposals with using DH group negotiated during phase 1. If the resulting list is empty (i.e. the DH group(s) configured for PFS differ from the one(s) configured for the IKE_SA), fall back to the first configured DH group from the CHILD_SA. This modificiation is due to the fact that it is likely that the peer supports the same DH group for PFS it did already for the IKE_SA.
Diffstat (limited to 'src/libcharon/plugins')
0 files changed, 0 insertions, 0 deletions