[strongSwan-dev] [PATCH] For PFS prefer DH group from IKE_SA over first configured

Martin Willi martin at strongswan.org
Tue Sep 10 10:33:26 CEST 2013

Hi Thomas,

> If PFS is configured for a CHILD_SA first try to create a list of
> proposals with using DH group negotiated during phase 1.

Yes that makes sense, thanks for the patch. Applied with some coding
style nitpicks to master [1].

Best Regards


More information about the Dev mailing list