[git.ipfire.org] IPFire 2.x development tree branch, core133, updated. 0dd16f4047789c69a3234eec0fdb963509f3fedd

[git.ipfire.org] IPFire 2.x development tree branch, core133, updated. 0dd16f4047789c69a3234eec0fdb963509f3fedd

[Arne Fitzenreiter]

[-- Attachment #1: Type: text/plain, Size: 1862 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, core133 has been updated
       via  0dd16f4047789c69a3234eec0fdb963509f3fedd (commit)
      from  faec909e1aa3d164739a8740d0958cc8e420a6a7 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 0dd16f4047789c69a3234eec0fdb963509f3fedd
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Mon Jun 17 14:08:00 2019 +0000

    vpnmain.cgi: Fix writing ESP settings for PFS ciphers
    
    The changes introduced due to #12091 caused IPsec ESP
    to be invalid if PFS ciphers were selected. Code has
    to read "!$pfs" instead of just "$pfs", as it should trigger
    for ciphers _without_ Perfect Forward Secrecy.
    
    Fixes #12099
    
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
    Cc: Michael Tremer <michael.tremer(a)ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 html/cgi-bin/vpnmain.cgi | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Difference in files:
diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi
index fbc274919..750b69b1d 100644
--- a/html/cgi-bin/vpnmain.cgi
+++ b/html/cgi-bin/vpnmain.cgi
@@ -3338,7 +3338,7 @@ sub make_algos($$$$$) {
 						push(@algo, $int);
 					}
 
-					if ($pfs || $grp eq "none") {
+					if (!$pfs || $grp eq "none") {
 						# noop
 					} elsif ($grp =~ m/^e(.*)$/) {
 						push(@algo, "ecp$1");


hooks/post-receive
--
IPFire 2.x development tree