New commits:
commit d26d2c02f46537397cf0bbb2d4d3d4451bb28ae3
Merge: 2b1e481 f0e2d05
Author: Andrew Cagney <[email protected]>
Date: Sat Jul 7 12:47:10 2018 -0400
kernel: filter out unsupported algorithms like RIPEMD (unless so configured)
kernel_alg.c was adding algorithms to the kernel algorithm db without
first checking if pluto is configured to support them.
This sets things up for all sorts of far more interesting changes:
- store ike_algs in the kernel algorithm db (and not
SADB/netkey centric structs)
- delete yet more magic switches that map between SADB and IKEv[12] values
- fixing (by deleting, see above) code that only builds when certain
SADB algorithms are present
- sorting out NULL_KAME
Merge commit 'f0e2d057ec3d73d6880b15cb639d6f17191d8a9a'
commit f0e2d057ec3d73d6880b15cb639d6f17191d8a9a
Author: Andrew Cagney <[email protected]>
Date: Fri Jul 6 21:35:58 2018 -0400
testing: don't expect RIPEMD or NULL_AUTH_AES_GMAC (when fips)
commit 6ac7d16c93fe447e0a529571bc381a25b38874bb
Author: Andrew Cagney <[email protected]>
Date: Fri Jul 6 21:34:05 2018 -0400
kernal: discard unsupported algorithms returned by netkey/sadb
Namely RIPEMD and NULL_AUTH_AES_GMAC (when FIPS).
Fortunately the algorithm parser would reject any attempts to use them.
_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit
