diff options
| author | Benedict Wong <benedictwong@google.com> | 2020-04-14 18:17:16 -0700 |
|---|---|---|
| committer | Benedict Wong <benedictwong@google.com> | 2020-04-29 15:49:44 -0700 |
| commit | c9c0cf4c253d54e6fa275b6fcb9ddbbff08b1f62 (patch) | |
| tree | 999cb375dfe546bc5846af67d5b628a11b4bf0db /opengl/java | |
| parent | c042e448136d42f98bc45a7028fdb36713ff51dc (diff) | |
Update MODP groups for IKEv2/IPsec VPNs
This commit improves security by removing MODP groups that are
considered to be breakable in the near-future, and adding support for
ones that are more highly recommended.
3072 and 4096 are added based on the IANA constants, and are already
supported in the IKEv2 library.
This commit is made in line with recommendations in RFC 8247:
https://tools.ietf.org/html/rfc8247#section-2.4
Bug: 154056830
Test: FrameworksNetTests, FrameworksIkeTests passing, manually tested.
Change-Id: I941dbbfc2d6be693869ba6213590a07f3eac4bc7
Diffstat (limited to 'opengl/java')
0 files changed, 0 insertions, 0 deletions