Revision 9d60be2a
Added by Viktor Gurov over 5 years ago
| src/etc/inc/ipsec.inc | ||
|---|---|---|
| 1918 | 1918 |
$proposal = array(); |
| 1919 | 1919 |
|
| 1920 | 1920 |
/* If multiple hash algorithms are present, loop through and add them all. */ |
| 1921 |
if (!empty($ph2ent['hash-algorithm-option']) && is_array($ph2ent['hash-algorithm-option'])) {
|
|
| 1921 |
if (!empty($ph2ent['hash-algorithm-option']) && is_array($ph2ent['hash-algorithm-option']) |
|
| 1922 |
&& !strpos($ealg_id, "gcm")) {
|
|
| 1922 | 1923 |
foreach ($ph2ent['hash-algorithm-option'] as $halgo) {
|
| 1923 | 1924 |
$proposal[] = ipsec_setup_proposal_algo($ealg_id, $keylen, $halgo, false, $ph2ent['pfsgroup']); |
| 1924 | 1925 |
} |
Also available in: Unified diff
Strip IPsec PH2 hash for AEAD ciphers. Issue #9726