Project

General

Profile

Actions
Copy link

Feature #10221

closed
VG RB

Update DH group warnings to say that group 5 is also weak

Feature #10221: Update DH group warnings to say that group 5 is also weak

Added by Viktor Gurov over 6 years ago. Updated over 6 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Renato Botelho
Category:
IPsec
Target version:
2.4.5-p1
Start date:
01/29/2020
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:

Description

from https://wiki.strongswan.org/projects/strongswan/wiki/SecurityRecommendations:
It is advised to adhere to the recommendation of the appropriate security authority when choosing ciphers
to secure the tunnel cryptographically. www.keylength.com lists some of the standards for western Europe
and the US. It is strongly advised to use at least 2048 bit key length for MODP Diffie-Hellman groups.

DH group 5 = 1536 bits

JP Updated by Jim Pingle over 6 years ago Actions
Copy link
 #2

  • Status changed from New to Pull Request Review

RB Updated by Renato Botelho over 6 years ago Actions
Copy link
 #3

  • Status changed from Pull Request Review to Feedback
  • Assignee set to Renato Botelho
  • Target version set to 2.5.0
  • % Done changed from 0 to 100

Pull request has been merged. Thanks!

VG Updated by Viktor Gurov over 6 years ago Actions
Copy link
 #4

additional PR for IPsec Phase 1 warning:
https://github.com/pfsense/pfsense/pull/4185

VG Updated by Viktor Gurov over 6 years ago Actions
Copy link
 #5

  • Status changed from Feedback to Resolved

ok on 2.5.0.a.20200211.1811

JP Updated by Jim Pingle over 6 years ago Actions
Copy link
 #6

  • Status changed from Resolved to Feedback
  • Target version changed from 2.5.0 to 2.4.5-p1

JP Updated by Jim Pingle over 6 years ago Actions
Copy link
 #7

  • Status changed from Feedback to Resolved

Group 5 is now visible in the warnings.

Actions
Copy link

Also available in: Atom