pfSense bugtracker

05/13/2015

06:17 PM pfSense Revision 10439116: ipsec: psk keyid bugfix

IPsec/IKEv2 PSK currently generates an invalid strongswan ipsec.conf file.
The local IKE ID is not inserted correctly... Bruno Thomsen

04:50 PM pfSense Revision 0d102fcd: ipsec: added ecc brainpool to vpn_ipsec_convert_to_modp()

Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com> Bruno Thomsen

05/12/2015

09:15 PM pfSense Revision b8e6729f: ipsec: pfs ecc brainpool curve support

Use brainpool curves as perfect forward security.
Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com> Bruno Thomsen

09:11 PM pfSense Revision 3922114b: ipsec: pfs ecc nist curve support

Use nist curves as perfect forward security.
Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com> Bruno Thomsen

08:44 PM pfSense Revision c55ec98a: ipsec: IKEv2 Diffie-Hellman ECC Brainpool support

Use of ECC Brainpool curves for IKEv2 is define in RFC6954.
Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com> Bruno Thomsen

08:10 PM pfSense Revision 7b826864: ipsec: IKE phase one AES-GCM support

Use of Galois/Counter Mode (GCM) during IKE phase-1 is defined in RFC4106.
Signed-off-by: Bruno Thomsen <bruno.thoms... Bruno Thomsen

07:53 PM pfSense Revision 50ed1824: bugfix: ipsec: nist ecp521 elliptic curve support

There was a small typo the vpn_ipsec_convert_to_modp() function.
Bug introduced in commit 7a747654e9ef5b4cec7184c770... Bruno Thomsen