New commits: commit 24aa5879a180e66eb662faca5a4eed259527b7c3 Author: Paul Wouters <pwouters at redhat.com> Date: Fri Mar 18 10:58:44 2016 -0400 IKEv2: Prefer sha2_512 over sha2_256 over sha1. Don't add aes_xcbc aes_xcbc is not supported yet in NSS, so we cannot use it for IKE yet. both for INTEG as PRF.