Bug 11549 - strongswan: Enable chapoly plugin
Summary: strongswan: Enable chapoly plugin
Status: CLOSED FIXED
Alias: None
Product: IPFire
Classification: Unclassified
Component: --- (show other bugs)
Version: 2
Hardware: unspecified Unspecified
: - Unknown - - Unknown -
Assignee: Peter Müller
QA Contact:
URL:
Keywords: Security
Depends on: KERNEL414
Blocks: 11855
  Show dependency tree / graph
 
Reported: 2017-11-29 14:16 UTC by Michael Tremer
Modified: 2018-09-10 09:58 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Tremer 2017-11-29 14:16:05 UTC 
This plugin is currently disabled since it requires kernel >= 4.2. After we have upgraded the kernel to 4.14, we should enable it and allow ChaCha20 and Poly1305 to be used in IPsec.
Comment 1 Peter Müller 2017-11-30 21:43:05 UTC 
Can we disable old plugins like "rc2"? Seems like strongswan still lodes them.
Comment 2 Michael Tremer 2018-05-18 16:05:23 UTC 
(In reply to Peter Müller from comment #1)
> Can we disable old plugins like "rc2"? Seems like strongswan still lodes
> them.

Yes you can disable rc2. Not sure what others there are that are "like" rc2. Everything that isn't listed on the GUI can be disabled IMHO.
Comment 3 Peter Müller 2018-05-30 06:44:10 UTC 
Okay, thanks. I will have a look at it as soon things are back to normal here.
Comment 4 Peter Müller 2018-06-30 11:22:28 UTC 
Developing patches...
Comment 5 Peter Müller 2018-06-30 17:19:12 UTC 
Sent in patches.
Comment 6 Peter Müller 2018-08-06 22:17:22 UTC 
Patches have been accepted and will be shipped in C123.