summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorangelos <angelos@openbsd.org>2000-11-11 05:00:33 +0000
committerangelos <angelos@openbsd.org>2000-11-11 05:00:33 +0000
commitd4c9a7e04c9c1bf44ac58935b53e20d78331f814 (patch)
tree368e2e3984fc538e4f9d02aedcfc8cf8279aac4d
parentThe -spi value is hex (andrew@etunnels.com) (diff)
downloadwireguard-openbsd-d4c9a7e04c9c1bf44ac58935b53e20d78331f814.tar.xz
wireguard-openbsd-d4c9a7e04c9c1bf44ac58935b53e20d78331f814.zip
AES should be 12 (from IANA) -- itojun@openbsd.org
Note that you have to recompile ipsecadm and isakmpd if you use a new kernel.
-rw-r--r--sys/net/pfkeyv2.h4
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/net/pfkeyv2.h b/sys/net/pfkeyv2.h
index 57ca811359e..5939e8a8250 100644
--- a/sys/net/pfkeyv2.h
+++ b/sys/net/pfkeyv2.h
@@ -229,9 +229,9 @@ struct sadb_policy {
#define SADB_EALG_3DESCBC 3
#define SADB_X_EALG_CAST 4
#define SADB_X_EALG_SKIPJACK 5
-#define SADB_X_EALG_AES 6
#define SADB_X_EALG_BLF 7
-#define SADB_EALG_MAX 7
+#define SADB_X_EALG_AES 12
+#define SADB_EALG_MAX 12
#define SADB_SAFLAGS_PFS 0x001 /* perfect forward secrecy */
#define SADB_X_SAFLAGS_HALFIV 0x002 /* Used for ESP-old */