denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add DHE enabled RSA variants to the supported TLS suites

Browse Source
This commit is contained in:
Martin Willi
2010-09-02 19:33:08 +02:00
parent f14358a9b5
commit ef0a8e5892
1 changed files with 36 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libtls/tls_crypto.c
+36
View File
@@ -375,6 +375,42 @@ typedef struct {
* Mapping suites to a set of algorithms * Mapping suites to a set of algorithms
*/ */
static suite_algs_t suite_algs[] = { static suite_algs_t suite_algs[] = {
{ TLS_DHE_RSA_WITH_AES_128_CBC_SHA,
HASH_SHA1, PRF_HMAC_SHA1, MODP_2048_BIT,
AUTH_HMAC_SHA1_160, ENCR_AES_CBC, 16
},
{ TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,
HASH_SHA256, PRF_HMAC_SHA2_256, MODP_3072_BIT,
AUTH_HMAC_SHA2_256_256, ENCR_AES_CBC, 16
},
{ TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
HASH_SHA1, PRF_HMAC_SHA1, MODP_3072_BIT,
AUTH_HMAC_SHA1_160, ENCR_AES_CBC, 32
},
{ TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,
HASH_SHA256, PRF_HMAC_SHA2_256, MODP_4096_BIT,
AUTH_HMAC_SHA2_256_256, ENCR_AES_CBC, 32
},
{ TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,
HASH_SHA1, PRF_HMAC_SHA1, MODP_2048_BIT,
AUTH_HMAC_SHA1_160, ENCR_CAMELLIA_CBC, 16
},
{ TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
HASH_SHA256, PRF_HMAC_SHA2_256, MODP_3072_BIT,
AUTH_HMAC_SHA2_256_256, ENCR_CAMELLIA_CBC, 16
},
{ TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,
HASH_SHA1, PRF_HMAC_SHA1, MODP_3072_BIT,
AUTH_HMAC_SHA1_160, ENCR_CAMELLIA_CBC, 32
},
{ TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256,
HASH_SHA256, PRF_HMAC_SHA2_256, MODP_4096_BIT,
AUTH_HMAC_SHA2_256_256, ENCR_CAMELLIA_CBC, 32
},
{ TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,
HASH_SHA1, PRF_HMAC_SHA1, MODP_2048_BIT,
AUTH_HMAC_SHA1_160, ENCR_3DES, 0
},
{ TLS_RSA_WITH_AES_128_CBC_SHA, { TLS_RSA_WITH_AES_128_CBC_SHA,
HASH_SHA1, PRF_HMAC_SHA1, MODP_NONE, HASH_SHA1, PRF_HMAC_SHA1, MODP_NONE,
AUTH_HMAC_SHA1_160, ENCR_AES_CBC, 16 AUTH_HMAC_SHA1_160, ENCR_AES_CBC, 16