diff --git a/programs/pluto/ikev2_spdb_struct.c b/programs/pluto/ikev2_spdb_struct.c index 74f3080..5d9d668 100644 --- a/programs/pluto/ikev2_spdb_struct.c +++ b/programs/pluto/ikev2_spdb_struct.c @@ -1545,7 +1545,7 @@ static struct ikev2_proposal default_ikev2_ike_proposal[] = { /* * IKEv2 proposal #2: * AES_CBC[256] - * SHA1, SHA2_256, AES_XCBC + * SHA1, SHA2_256 * MODP1536, MODP2048 * INTEG???? * @@ -1557,7 +1557,7 @@ static struct ikev2_proposal default_ikev2_ike_proposal[] = { .protoid = IKEv2_SEC_PROTO_IKE, .transforms = { [IKEv2_TRANS_TYPE_ENCR] = TR(ENCR_AES_CBC_256), - [IKEv2_TRANS_TYPE_INTEG] = TR(AUTH_SHA1_96, AUTH_SHA2_256_128, AUTH_AES_XCBC_96), + [IKEv2_TRANS_TYPE_INTEG] = TR(AUTH_SHA1_96, AUTH_SHA2_256_128), [IKEv2_TRANS_TYPE_PRF] = TR(PRF_SHA1, PRF_SHA2_256, PRF_AES128_XCBC), [IKEv2_TRANS_TYPE_DH] = TR(DH_MODP1536, DH_MODP2048), }, @@ -1565,7 +1565,7 @@ static struct ikev2_proposal default_ikev2_ike_proposal[] = { /* * IKEv2 proposal #3: * AES_CBC[128] - * SHA1, SHA2_256, AES_XCBC + * SHA1, SHA2_256 * MODP1536, MODP2048 * INTEG???? * @@ -1577,7 +1577,7 @@ static struct ikev2_proposal default_ikev2_ike_proposal[] = { .protoid = IKEv2_SEC_PROTO_IKE, .transforms = { [IKEv2_TRANS_TYPE_ENCR] = TR(ENCR_AES_CBC_128), - [IKEv2_TRANS_TYPE_INTEG] = TR(AUTH_SHA1_96, AUTH_SHA2_256_128, AUTH_AES_XCBC_96), + [IKEv2_TRANS_TYPE_INTEG] = TR(AUTH_SHA1_96, AUTH_SHA2_256_128), [IKEv2_TRANS_TYPE_PRF] = TR(PRF_SHA1, PRF_SHA2_256, PRF_AES128_XCBC), [IKEv2_TRANS_TYPE_DH] = TR(DH_MODP1536, DH_MODP2048), },