|
|
@ -186,8 +186,7 @@ fn add_proposals(
|
|
|
|
// Rule 1: warn on weak or unknown transforms
|
|
|
|
// Rule 1: warn on weak or unknown transforms
|
|
|
|
for xform in &transforms {
|
|
|
|
for xform in &transforms {
|
|
|
|
match *xform {
|
|
|
|
match *xform {
|
|
|
|
IkeV2Transform::Encryption(ref enc) => {
|
|
|
|
IkeV2Transform::Encryption(
|
|
|
|
match *enc {
|
|
|
|
|
|
|
|
IkeTransformEncType::ENCR_DES_IV64
|
|
|
|
IkeTransformEncType::ENCR_DES_IV64
|
|
|
|
| IkeTransformEncType::ENCR_DES
|
|
|
|
| IkeTransformEncType::ENCR_DES
|
|
|
|
| IkeTransformEncType::ENCR_3DES
|
|
|
|
| IkeTransformEncType::ENCR_3DES
|
|
|
@ -197,14 +196,11 @@ fn add_proposals(
|
|
|
|
| IkeTransformEncType::ENCR_BLOWFISH
|
|
|
|
| IkeTransformEncType::ENCR_BLOWFISH
|
|
|
|
| IkeTransformEncType::ENCR_3IDEA
|
|
|
|
| IkeTransformEncType::ENCR_3IDEA
|
|
|
|
| IkeTransformEncType::ENCR_DES_IV32
|
|
|
|
| IkeTransformEncType::ENCR_DES_IV32
|
|
|
|
| IkeTransformEncType::ENCR_NULL => {
|
|
|
|
| IkeTransformEncType::ENCR_NULL,
|
|
|
|
SCLogDebug!("Weak Encryption: {:?}", enc);
|
|
|
|
) => {
|
|
|
|
// XXX send event only if direction == Direction::ToClient ?
|
|
|
|
// XXX send event only if direction == Direction::ToClient ?
|
|
|
|
tx.set_event(IkeEvent::WeakCryptoEnc);
|
|
|
|
tx.set_event(IkeEvent::WeakCryptoEnc);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
_ => (),
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
IkeV2Transform::PRF(ref prf) => match *prf {
|
|
|
|
IkeV2Transform::PRF(ref prf) => match *prf {
|
|
|
|
IkeTransformPRFType::PRF_NULL => {
|
|
|
|
IkeTransformPRFType::PRF_NULL => {
|
|
|
|
SCLogDebug!("'Null' PRF transform proposed");
|
|
|
|
SCLogDebug!("'Null' PRF transform proposed");
|
|
|
|