[Swan-commit] Changes to ref refs/heads/master
Andrew Cagney
cagney at vault.libreswan.fi
Wed Jun 14 14:28:52 UTC 2017
New commits:
commit 1af19ed547f8304e7c33e10ab6cfd6d97369dc99
Merge: d18b5ca 9ce3f66
Author: Andrew Cagney <cagney at gnu.org>
Date: Wed Jun 14 10:25:04 2017 -0400
pluto: remove MD5 from more defaults
- IKEv1 and IKEv2 ike=...
- IKEv1 no-ike=...
- IKEv1 esp/ah=...
It was removed from IKEv2 no-ike=... and no-esp/ah=... some time ago.
This should only leave IKEv1 no-esp/ah=, and that involves spdb.c.
Merge commit '9ce3f664eab11f06024bfdcfdcb705845620eb7b'
commit 9ce3f664eab11f06024bfdcfdcb705845620eb7b
Author: Andrew Cagney <cagney at gnu.org>
Date: Tue Jun 13 12:41:21 2017 -0400
testing: update algparse's output so md5 isn't an expected default
commit fe5aad18c816a31595f43331c817ca924b59b8c0
Author: Andrew Cagney <cagney at gnu.org>
Date: Tue Jun 13 12:16:35 2017 -0400
pluto: drop MD5 from ESP/AH defaults when an esp= line
commit 728ccdf534b9efae27accccf240fa3fd79732dbe
Author: Andrew Cagney <cagney at gnu.org>
Date: Tue Jun 13 12:01:09 2017 -0400
testing: update results to match no md5 IKE default
commit 4aa56d4840d76b0825994229d261b8b7c4a48e6d
Author: Andrew Cagney <cagney at gnu.org>
Date: Tue Jun 13 10:26:18 2017 -0400
pluto: remove HMAC_MD5 from remaining IKE default proposals
That is:
IKEv1 IKE with no-ike=-line
IKEv1 IKE with ike=aes
IKEv2 IKE with ike=aes
IKEv2 dropped MD5 from its no-ike-line defaults some time ago
More information about the Swan-commit
mailing list