Page MenuHomeVyOS Platform

Update strongSwan cipher suites list for IPSec settings
Closed, ResolvedPublicFEATURE REQUEST

Description

The current list of cipher suites in VyOS is outdated and many suites that are supported by strongSwan are not available via CLI. We should add them.
Lists of suites supported by strongSwan:
https://wiki.strongswan.org/projects/strongswan/wiki/IKEv1CipherSuites
https://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)

Event Timeline

zsdc changed the task status from Open to In progress.Mar 11 2020, 2:11 PM
zsdc moved this task from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
syncer renamed this task from Actualize strongSwan cipher suites list for IPSec settings to Update strongSwan cipher suites list for IPSec settings.Mar 11 2020, 2:12 PM
syncer triaged this task as Low priority.
syncer updated the task description. (Show Details)
Viacheslav assigned this task to zsdc.
erkin set Issue type to Feature (new functionality).Aug 31 2021, 5:38 PM