diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2016-05-04 11:26:38 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2016-05-04 11:33:28 +0200 |
| commit | fae18fd201eb0b2e9a437a9e1b6faf52afd784f8 (patch) | |
| tree | 1c3a03fe3faf1d67600f6a946c2b32f12f5efd07 /src/swanctl/commands/list_conns.c | |
| parent | 2b9bfb6682f0a936af5b76a03c36d0d8fe42eb08 (diff) | |
| download | strongswan-fae18fd201eb0b2e9a437a9e1b6faf52afd784f8.tar.bz2 strongswan-fae18fd201eb0b2e9a437a9e1b6faf52afd784f8.tar.xz | |
proposal: Remove some weaker and rarely used DH groups from the default proposal
This fixes an interoperability issue with Windows Server 2012 R2 gateways.
They insist on using modp1024 for IKE, however, Microsoft's IKEv2
implementation seems only to consider the first 15 DH groups in the proposal.
Depending on the loaded plugins modp1024 is now at position 17 or even
later, causing the server to reject the proposal. By removing some of
the weaker and rarely used DH groups from the default proposal we make
sure modp1024 is among the first 15 DH groups. The removed groups may
still be used by configuring custom proposals.
Diffstat (limited to 'src/swanctl/commands/list_conns.c')
0 files changed, 0 insertions, 0 deletions