New commits: commit d26d2c02f46537397cf0bbb2d4d3d4451bb28ae3 Merge: 2b1e481 f0e2d05 Author: Andrew Cagney <cag...@gnu.org> Date: Sat Jul 7 12:47:10 2018 -0400
kernel: filter out unsupported algorithms like RIPEMD (unless so configured) kernel_alg.c was adding algorithms to the kernel algorithm db without first checking if pluto is configured to support them. This sets things up for all sorts of far more interesting changes: - store ike_algs in the kernel algorithm db (and not SADB/netkey centric structs) - delete yet more magic switches that map between SADB and IKEv[12] values - fixing (by deleting, see above) code that only builds when certain SADB algorithms are present - sorting out NULL_KAME Merge commit 'f0e2d057ec3d73d6880b15cb639d6f17191d8a9a' commit f0e2d057ec3d73d6880b15cb639d6f17191d8a9a Author: Andrew Cagney <cag...@gnu.org> Date: Fri Jul 6 21:35:58 2018 -0400 testing: don't expect RIPEMD or NULL_AUTH_AES_GMAC (when fips) commit 6ac7d16c93fe447e0a529571bc381a25b38874bb Author: Andrew Cagney <cag...@gnu.org> Date: Fri Jul 6 21:34:05 2018 -0400 kernal: discard unsupported algorithms returned by netkey/sadb Namely RIPEMD and NULL_AUTH_AES_GMAC (when FIPS). Fortunately the algorithm parser would reject any attempts to use them. _______________________________________________ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit