update strongswan.conf for pluto and scepclient

testing/hosts/alice/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/hosts/bob/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/hosts/dave/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/hosts/sun/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/hosts/venus/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ike/rw-cert/hosts/moon/etc/strongswan.conf

@@ -1,9 +1,9 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl aes des sha1 sha2 md5 gmp random x509 pubkey hmac xcbc stroke kernel-netlink
+  load = curl aes des sha1 sha2 md5 gmp random pubkey hmac x509 xcbc stroke kernel-netlink
 }
 
 pluto {
-  load = curl aes des sha1 sha2 md5 gmp random hmac
+  load = curl aes des sha1 sha2 md5 gmp random pubkey hmac
 }

testing/tests/ike/rw_v1-net_v2/hosts/moon/etc/strongswan.conf

@@ -1,9 +1,9 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl aes des sha1 sha2 md5 gmp random x509 pubkey hmac xcbc stroke kernel-netlink
+  load = curl aes des sha1 sha2 md5 gmp random pubkey hmac x509 xcbc stroke kernel-netlink
 }
 
 pluto {
-  load = curl aes des sha1 sha2 md5 gmp random hmac
+  load = curl aes des sha1 sha2 md5 gmp random pubkey hmac
 }

testing/tests/ikev1/alg-blowfish/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des blowfish hmac gmp random curl
+  load = sha1 sha2 md5 aes des blowfish hmac gmp pubkey random curl
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/alg-blowfish/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des blowfish hmac gmp random curl
+  load = sha1 sha2 md5 aes des blowfish hmac gmp pubkey random curl
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/alg-serpent/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des serpent hmac gmp random curl
+  load = sha1 sha2 md5 aes des serpent hmac gmp pubkey random curl
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/alg-serpent/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des serpent hmac gmp random curl
+  load = sha1 sha2 md5 aes des serpent hmac gmp pubkey random curl
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/alg-twofish/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des twofish hmac gmp random curl
+  load = sha1 sha2 md5 aes des twofish hmac gmp pubkey random curl
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/alg-twofish/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des twofish hmac gmp random curl
+  load = sha1 sha2 md5 aes des twofish hmac gmp pubkey random curl
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/attr-cert/hosts/moon/etc/strongswan.conf

@@ -1,7 +1,13 @@
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl
 }
 
 openac {
   load = sha1 sha2 md5 gmp random x509 pubkey
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/crl-ldap/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl ldap
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl ldap
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/crl-ldap/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl ldap
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl ldap
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/default-keys/hosts/carol/etc/strongswan.conf

@@ -1,9 +1,15 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl
 }
 
 scepclient {
-  load = sha1 sha2 md5 aes des hmac random
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/default-keys/hosts/moon/etc/strongswan.conf

@@ -1,9 +1,15 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl
 }
 
 scepclient {
-  load = sha1 sha2 md5 aes des hmac random
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/mode-config/hosts/moon/etc/strongswan.conf

@@ -1,7 +1,13 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl
   dns1 = PH_IP_WINNETOU
   dns2 = PH_IP6_VENUS
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/multi-level-ca-ldap/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl ldap
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl ldap
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/multi-level-ca-ldap/hosts/dave/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl ldap
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl ldap
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/multi-level-ca-ldap/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl ldap
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl ldap
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/nat-two-rw-psk/hosts/alice/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/nat-two-rw-psk/hosts/sun/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/nat-two-rw-psk/hosts/venus/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/net2net-psk-fail/hosts/moon/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/net2net-psk-fail/hosts/sun/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/net2net-psk/hosts/moon/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/net2net-psk/hosts/sun/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/req-pkcs10/hosts/carol/etc/strongswan.conf

@@ -1,9 +1,15 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl
 }
 
 scepclient {
-  load = sha1 sha2 md5 aes des hmac random
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/req-pkcs10/hosts/moon/etc/strongswan.conf

@@ -1,9 +1,15 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl
 }
 
 scepclient {
-  load = sha1 sha2 md5 aes des hmac random
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/rw-psk-fqdn-named/hosts/carol/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/rw-psk-fqdn-named/hosts/moon/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/rw-psk-fqdn/hosts/carol/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/rw-psk-fqdn/hosts/moon/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/rw-psk-ipv4/hosts/carol/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/rw-psk-ipv4/hosts/moon/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/rw-psk-no-policy/hosts/carol/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/rw-psk-no-policy/hosts/moon/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/self-signed/hosts/carol/etc/strongswan.conf

@@ -1,9 +1,15 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl
 }
 
 scepclient {
-  load = sha1 sha2 md5 aes des hmac random
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/self-signed/hosts/moon/etc/strongswan.conf

@@ -1,9 +1,15 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random curl
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random curl
 }
 
 scepclient {
-  load = sha1 sha2 md5 aes des hmac random
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random
+}
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
 }

testing/tests/ikev1/xauth-psk/hosts/carol/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/xauth-psk/hosts/dave/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev1/xauth-psk/hosts/moon/etc/strongswan.conf

@@ -3,3 +3,9 @@
 pluto {
   load = sha1 sha2 md5 aes des hmac gmp random
 }
+
+# pluto uses optimized DH exponent sizes (RFC 3526)
+
+libstrongswan {
+  dh_exponent_ansi_x9_42 = no
+}

testing/tests/ikev2/default-keys/hosts/carol/etc/strongswan.conf

@@ -5,5 +5,5 @@ charon {
 }
 
 scepclient {
-  load = sha1 sha2 md5 aes des hmac random
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random
 }

testing/tests/ikev2/default-keys/hosts/moon/etc/strongswan.conf

@@ -5,5 +5,5 @@ charon {
 }
 
 scepclient {
-  load = sha1 sha2 md5 aes des hmac random
+  load = sha1 sha2 md5 aes des hmac gmp pubkey random
 }