added non-standard SERPENT and TWOFISH support to kernel_netlink plugin
[strongswan.git] / src / libhydra / plugins / kernel_netlink / kernel_netlink_ipsec.c
index 25878ad..8cc9a62 100644 (file)
@@ -183,6 +183,8 @@ static kernel_algorithm_t encryption_algs[] = {
 /*     {ENCR_CAMELLIA_CCM_ICV8,        "***"                           }, */
 /*     {ENCR_CAMELLIA_CCM_ICV12,       "***"                           }, */
 /*     {ENCR_CAMELLIA_CCM_ICV16,       "***"                           }, */
+       {ENCR_SERPENT_CBC,                      "serpent"                       },
+       {ENCR_TWOFISH_CBC,                      "twofish"                       },
        {END_OF_LIST,                           NULL                            }
 };
 
@@ -2171,6 +2173,11 @@ kernel_netlink_ipsec_t *kernel_netlink_ipsec_create()
                                                                                                  hydra->daemon),
        );
 
+       if (streq(hydra->daemon, "pluto"))
+       {       /* no routes for pluto, they are installed via updown script */
+               this->install_routes = FALSE;
+       }
+
        /* disable lifetimes for allocated SPIs in kernel */
        fd = open("/proc/sys/net/core/xfrm_acq_expires", O_WRONLY);
        if (fd)