From: Peter Müller <peter.mueller@link38.eu>
Date: Sat, 30 Jun 2018 15:15:22 +0000 (+0200)
Subject: update cryptography settings in StrongSwan LFS file
X-Git-Tag: v2.21-core123~81
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=6cedc16d90cbce2d09c909d1dd79119bd161b344;p=ipfire-2.x.git

update cryptography settings in StrongSwan LFS file

The RC2 plugin was never supported by the WebUI and is insecure,
so it became obsolete here. To support new ChaCha20/Poly1305, the
corresponding module needs to be enabled.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/lfs/strongswan b/lfs/strongswan
index 042dac5303..102c247242 100644
--- a/lfs/strongswan
+++ b/lfs/strongswan
@@ -92,8 +92,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 		--enable-eap-peap \
 		--enable-eap-mschapv2 \
 		--enable-eap-identity \
+		--enable-chapoly \
 		--disable-padlock \
-		--disable-chapoly \
+		--disable-rc2 \
 		$(CONFIGURE_OPTIONS)
 
 	cd $(DIR_APP) && make $(MAKETUNING)