Project

General

Profile

Actions
Copy link

Feature #9757

closed

DH groups 25,26,27 not listed for phase1 & phase2

Added by Viktor Gurov over 4 years ago. Updated over 4 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Jim Pingle
Category:
IPsec
Target version:
2.4.5
Start date:
09/13/2019
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:

Description

groups 25 (ecp192), 26 (ecp224) and 27 (ecp224bp) is in list of supported by strongswan:

# ipsec listalgs | grep ECP
  dh-group:   ECP_256[openssl] ECP_384[openssl] ECP_521[openssl] ECP_224[openssl] ECP_192[openssl] ECP_256_BP[openssl]
              ECP_384_BP[openssl] ECP_512_BP[openssl] ECP_224_BP[openssl] MODP_3072[openssl] MODP_4096[openssl]

but not listed in DH Group / PFS selection menu

2.5.0-DEVELOPMENT (amd64)
built on Thu Sep 12 23:59:20 EDT 2019
FreeBSD 12.0-RELEASE-p10

Actions
Copy link

Also available in: Atom PDF