The current list of cipher suites in VyOS is outdated and many suites that are supported by strongSwan are not available via CLI. We should add them.
Lists of suites supported by strongSwan:
https://wiki.strongswan.org/projects/strongswan/wiki/IKEv1CipherSuites
https://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites
Description
Description
Details
Details
- Version
- -
- Is it a breaking change?
- Unspecified (possibly destroys the router)
- Issue type
- Feature (new functionality)
Status | Subtype | Assigned | Task | ||
---|---|---|---|---|---|
Resolved | sarthurdev | T2816 Rewrite IPsec scripts with the new XML/Python approach | |||
Resolved | FEATURE REQUEST | zsdc | T2049 Update strongSwan cipher suites list for IPSec settings | ||
Resolved | BUG | jestabro | T2164 Package libstrongswan-standard-plugins missing from image |