Skip to content

Commit

Permalink
Added chacha20-poly1305 as a DTLS ciphersuite for gnutls
Browse files Browse the repository at this point in the history
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
  • Loading branch information
Nikos Mavrogiannopoulos authored and David Woodhouse committed Aug 6, 2015
1 parent 20c2a03 commit 0e09ba3
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions dtls.c
Expand Up @@ -450,6 +450,9 @@ void append_dtls_ciphers(struct openconnect_info *vpninfo, struct oc_text_buf *b
#if GNUTLS_VERSION_NUMBER < 0x030200
# define GNUTLS_DTLS1_2 202
#endif
#if GNUTLS_VERSION_NUMBER < 0x030400
# define GNUTLS_CIPHER_CHACHA20_POLY1305 23
#endif

struct {
const char *name;
Expand All @@ -469,6 +472,8 @@ struct {
"NONE:+VERS-DTLS1.2:+COMP-NULL:+AES-128-GCM:+AEAD:+RSA:%COMPAT:+SIGN-ALL", "3.2.7" },
{ "OC-DTLS1_2-AES256-GCM", GNUTLS_DTLS1_2, GNUTLS_CIPHER_AES_256_GCM, GNUTLS_MAC_AEAD,
"NONE:+VERS-DTLS1.2:+COMP-NULL:+AES-256-GCM:+AEAD:+RSA:%COMPAT:+SIGN-ALL", "3.2.7" },
{ "OC-DTLS1_2-CHACHA20-POLY1305", GNUTLS_DTLS1_2, GNUTLS_CIPHER_CHACHA20_POLY1305, GNUTLS_MAC_AEAD,
"NONE:+VERS-DTLS1.2:+COMP-NULL:+CHACHA20-POLY1305:+AEAD:+RSA:%COMPAT:+SIGN-ALL", "3.4.0" },
};

#if GNUTLS_VERSION_NUMBER < 0x030009
Expand Down

0 comments on commit 0e09ba3

Please sign in to comment.