New commits: commit ebd8ef579a4ac3affa13680e92391be3386927c9 Author: Paul Wouters <pwout...@redhat.com> Date: Fri May 16 14:00:29 2014 -0400
pluto: Added int crypto_req_keysize(int ksproto, int algo); This will return the RFC default key size for an algorithm. ksproto is used to ask for v1, v2 or ESP algorithms. This function is for use in the out_sa() functions. We need this as for some algos, according to the RFCs we MUST send a key length, and we currently do not always do that. For example for AES, CAST, CAMELLIA this is required. Current code only does this for ESP_AES. The reason we don't set a missing key size on loading the conn, is that we don't want to break current logic on the responder. So if we loaded a conn with ike=aes we will accept aes128, aes192 and aes256, even though on outgoing connections for that conn we will only use the default aes128. If we would set aes128 upon loading, we would start rejecting aes192 and aes256 on incoming connections. (code that will implement adding OAKLEY_KEY_LENGTH and KEY_LENGTH coming soon) commit e621a3a64f2463e48e75e243a0fd63de82669cec Author: Paul Wouters <pwout...@redhat.com> Date: Fri May 16 09:27:44 2014 -0400 rsasigkey: fix typo in message _______________________________________________ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit