]> git.ipfire.org Git - ipfire-2.x.git/commit
vpnmain.cgi: Fix writing ESP settings for PFS ciphers v2.23-core133
authorPeter Müller <peter.mueller@ipfire.org>
Mon, 17 Jun 2019 14:08:00 +0000 (14:08 +0000)
committerMichael Tremer <michael.tremer@ipfire.org>
Mon, 17 Jun 2019 15:14:27 +0000 (16:14 +0100)
commit0dd16f4047789c69a3234eec0fdb963509f3fedd
tree339207250e557a5f5d961859463a5f0b0d2a4c6e
parentfaec909e1aa3d164739a8740d0958cc8e420a6a7
vpnmain.cgi: Fix writing ESP settings for PFS ciphers

The changes introduced due to #12091 caused IPsec ESP
to be invalid if PFS ciphers were selected. Code has
to read "!$pfs" instead of just "$pfs", as it should trigger
for ciphers _without_ Perfect Forward Secrecy.

Fixes #12099

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
html/cgi-bin/vpnmain.cgi