mirror of
https://github.com/openwrt/packages.git
synced 2026-10-22 17:07:31 +04:00
Florian Eckert
eb8ea9a7c5
With peers that support multiple IKEv2 key exchanges (RFC 9370), up to seven additional key exchanges may be negotiated. strongSwan configures them by prefixing the algorithm keyword with keX_ (X being 1..7), e.g. 'x25519-ke1_mlkem768'. The 'dh_group' option only allows a single key exchange method. Add a 'ke' list option to the crypto_proposal sections, which holds the additional key exchange methods. Both config_ike_proposal() and config_esp_proposal() append them to the generated proposal after dh_group, so 'x25519' plus 'list ke mlkem768' results in 'x25519-ke1_mlkem768'. The keN_ prefix is generated by the init script from the position of the entry in the list. Entries which already carry a keN_ prefix are used verbatim with a warning, which keeps keX_none (used to make a key exchange round optional) working. Entries beyond the seventh are dropped with a warning. A warning is also emitted if key exchange methods are configured without a dh_group, since the first key exchange method is mandatory. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
OpenWrt packages feed
Description
This is the OpenWrt "packages"-feed containing community-maintained build scripts, options and patches for applications, modules and libraries used within OpenWrt.
Installation of pre-built packages is handled directly by the opkg utility within your running OpenWrt system or by using the OpenWrt SDK on a build system.
Usage
This repository is intended to be layered on-top of an OpenWrt buildroot. If you do not have an OpenWrt buildroot installed, see the documentation at: OpenWrt Buildroot – Installation on the OpenWrt support site.
This feed is enabled by default. To install all its package definitions, run:
./scripts/feeds update packages
./scripts/feeds install -a -p packages
License
See LICENSE file.
Package Guidelines
See CONTRIBUTING.md file.