testing: Enable mgf1 plugin for scenarios where FreeRADIUS uses PSS signatures
Looks like a cipher suite without DHE was selected previously.
Could be a side-effect of dc1085734f ("testing: Remove unnecessary
FreeRADIUS dh_file option as recommended in the log").
This commit is contained in:
@@ -1,6 +1,6 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
charon {
|
charon {
|
||||||
load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-identity eap-md5 eap-peap updown
|
load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 stroke kernel-netlink socket-default eap-identity eap-md5 eap-peap updown
|
||||||
multiple_authentication=no
|
multiple_authentication=no
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
charon {
|
charon {
|
||||||
load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-identity eap-md5 eap-peap updown
|
load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 stroke kernel-netlink socket-default eap-identity eap-md5 eap-peap updown
|
||||||
multiple_authentication=no
|
multiple_authentication=no
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
charon {
|
charon {
|
||||||
load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown
|
load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown
|
||||||
multiple_authentication=no
|
multiple_authentication=no
|
||||||
syslog {
|
syslog {
|
||||||
daemon {
|
daemon {
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
charon {
|
charon {
|
||||||
load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown
|
load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown
|
||||||
multiple_authentication=no
|
multiple_authentication=no
|
||||||
syslog {
|
syslog {
|
||||||
daemon {
|
daemon {
|
||||||
|
|||||||
@@ -5,5 +5,5 @@ swanctl {
|
|||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown
|
load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -5,5 +5,5 @@ swanctl {
|
|||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown
|
load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -5,5 +5,5 @@ swanctl {
|
|||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown
|
load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -5,5 +5,5 @@ swanctl {
|
|||||||
}
|
}
|
||||||
|
|
||||||
charon-systemd {
|
charon-systemd {
|
||||||
load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown
|
load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user