From 6cedc16d90cbce2d09c909d1dd79119bd161b344 Mon Sep 17 00:00:00 2001
From: =?utf8?q?Peter=20M=C3=BCller?= <peter.mueller@link38.eu>
Date: Sat, 30 Jun 2018 17:15:22 +0200
Subject: [PATCH] update cryptography settings in StrongSwan LFS file
MIME-Version: 1.0
Content-Type: text/plain; charset=utf8
Content-Transfer-Encoding: 8bit

The RC2 plugin was never supported by the WebUI and is insecure,
so it became obsolete here. To support new ChaCha20/Poly1305, the
corresponding module needs to be enabled.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---
 lfs/strongswan | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/lfs/strongswan b/lfs/strongswan
index 042dac5303..102c247242 100644
--- a/lfs/strongswan
+++ b/lfs/strongswan
@@ -92,8 +92,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 		--enable-eap-peap \
 		--enable-eap-mschapv2 \
 		--enable-eap-identity \
+		--enable-chapoly \
 		--disable-padlock \
-		--disable-chapoly \
+		--disable-rc2 \
 		$(CONFIGURE_OPTIONS)
 
 	cd $(DIR_APP) && make $(MAKETUNING)
-- 
2.39.2