kernel-pfkey: Enable macOS native AES_GCM_ICV16 support

macOS supports AES_GCM_ICV16 natively using PF_KEYv2.

This change enables AES_GCM if the corresponding definition is detected
in the headers.

With this change it is no longer necessary to use the libipsec module to
use AES_GCM on macOS.

Closes strongswan/strongswan#107.

diff --git a/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c b/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
index b937a769ec57d9678e03d803c43d858641b2b934..34089f9127609358bcda33d8dae47e8a8b4615f5 100644 (file)
--- a/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
+++ b/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
@@ -890,6 +890,8 @@ static kernel_algorithm_t encryption_algs[] = {
        {ENCR_AES_GCM_ICV8,                     SADB_X_EALG_AES_GCM_ICV8        },
        {ENCR_AES_GCM_ICV12,            SADB_X_EALG_AES_GCM_ICV12       },
        {ENCR_AES_GCM_ICV16,            SADB_X_EALG_AES_GCM_ICV16       },
+#elif defined(SADB_X_EALG_AES_GCM) /* macOS */
+       {ENCR_AES_GCM_ICV16,            SADB_X_EALG_AES_GCM                     },
 #endif
 #ifdef SADB_X_EALG_CAMELLIACBC
        {ENCR_CAMELLIA_CBC,                     SADB_X_EALG_CAMELLIACBC         },