Tobias Brunner fae18fd201 proposal: Remove some weaker and rarely used DH groups from the default proposal ... This fixes an interoperability issue with Windows Server 2012 R2 gateways. They insist on using modp1024 for IKE, however, Microsoft's IKEv2 implementation seems only to consider the first 15 DH groups in the proposal. Depending on the loaded plugins modp1024 is now at position 17 or even later, causing the server to reject the proposal. By removing some of the weaker and rarely used DH groups from the default proposal we make sure modp1024 is among the first 15 DH groups. The removed groups may still be used by configuring custom proposals.		2016-05-04 11:33:28 +02:00
..
backend.h	Moved data structures to new collections subfolder	2012-10-24 16:00:49 +02:00
backend_manager.c	ike-cfg: remove the to be obsoleted allow any parameter in get_my/other_addr	2013-09-04 10:38:37 +02:00
backend_manager.h	Moved host_t and host_resolver_t to a new networking subfolder	2012-10-24 15:06:18 +02:00
child_cfg.c	Implemented IPsec policies restricted to given network interface	2016-04-09 16:51:02 +02:00
child_cfg.h	Implemented IPsec policies restricted to given network interface	2016-04-09 16:51:02 +02:00
ike_cfg.c	Use standard unsigned integer types	2016-03-24 18:52:48 +01:00
ike_cfg.h	Use standard unsigned integer types	2016-03-24 18:52:48 +01:00
peer_cfg.c	peer-cfg: Use struct to pass data to constructor	2016-04-09 16:51:01 +02:00
peer_cfg.h	peer-cfg: Use struct to pass data to constructor	2016-04-09 16:51:01 +02:00
proposal.c	proposal: Remove some weaker and rarely used DH groups from the default proposal	2016-05-04 11:33:28 +02:00
proposal.h	Use standard unsigned integer types	2016-03-24 18:52:48 +01:00