ryru / strongswan

strongSwan - IPsec-based VPN
https://www.strongswan.org
Other
0 stars 1 forks source link

Apply config order of DH groups #23

Open ryru opened 4 years ago

ryru commented 4 years ago

Besides filtering, ordering the DH groups might also be of interest. Maybe could be added as a new issue.

Originally posted by @tobiasbrunner in https://github.com/ryru/strongswan/pull/19#r498820766

and

Yes, if one wanted to prefer curve25519 over ecp256. The order is currently determined by the plugin load order and their immutable internal algorithm registration order.