Signed-off-by: Noel Kuntze <noel.kuntze@thermi.consulting>

Retire weak algorithms like MD5 and 3DES.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>

Fixes CVE-2017-9022, CVE-2017-9023.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Steven Barth <steven@midlink.org>

gmpdh plugin implements DH Groups (same as normal GMP plugin), but links to GMP statically and is stripped of all RSA based stuff. Binary size for plugin is ~20kbytes with no dependency on libgmp (200+ kbytes after squash), easilly fitting into flash space restricted devices.

strongswan-isakmp metapackage defines a minimal set of strongswan plugins (including gmpdh) for ISAKMP / IKEv1 PSK tunnels. Will fit even 4mb routers (like tplink wr841n) with disabled IPv6 support and packages (so its a trade - IPv6 or ipsec tunnels).

Signed-of-by: Mikalai Miadzvedz <brainsucker.na@gmail.com>