libipsecconf: Add ECDSA support

Signed-off-by: Paul Wouters <pwouters@redhat.com>
libreswan · Sep 10, 2018 · 19a69d7 · 19a69d7
1 parent 4e2c9be
commit 19a69d7
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/lib/libipsecconf/confread.c b/lib/libipsecconf/confread.c
@@ -1386,6 +1386,15 @@ static bool load_conn(
 			} else if (streq(val, "rsa-sha2_512")) {
 				conn->policy |= POLICY_RSASIG;
 				conn->sighash_policy |= POL_SIGHASH_SHA2_512;
+			} else if (streq(val, "ecdsa") || streq(val, "ecdsa-sha2_256")) {
+				conn->policy |= POLICY_ECDSA;
+				conn->sighash_policy |= POL_SIGHASH_SHA2_256;
+			} else if (streq(val, "ecdsa-sha2_384")) {
+				conn->policy |= POLICY_ECDSA;
+				conn->sighash_policy |= POL_SIGHASH_SHA2_384;
+			} else if (streq(val, "ecdsa-sha2_512")) {
+				conn->policy |= POLICY_ECDSA;
+				conn->sighash_policy |= POL_SIGHASH_SHA2_512;
 			} else {
 				starter_error_append(perrl, "connection authby= value is unknown");
 				return TRUE;