webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-27 11:13:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

vpnmain.cgi: Fix wrong cipher suite generation when PFS is disabled

Browse Source 
Fixes: #12091
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2019-06-05 10:22:53 +01:00
parent 01320a141d
commit 745915d82c
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
html/cgi-bin/vpnmain.cgi
View File

@@ -3331,14 +3331,14 @@ sub make_algos($$$$$) {
push(@algo, "modp$grp");
}
} elsif ($mode eq "esp" && $pfs) {
} elsif ($mode eq "esp") {
my $is_aead = ($enc =~ m/[cg]cm/);
if (!$is_aead) {
push(@algo, $int);
}
if ($grp eq "none") {
if ($pfs || $grp eq "none") {
# noop
} elsif ($grp =~ m/^e(.*)$/) {
push(@algo, "ecp$1");