commit 0fff1ed7b909b448f5241c87c4d3804877761088
author Benedict Wong <benedictwong@google.com> Tue Apr 28 19:26:15 2020 +0000
committer Benedict Wong <benedictwong@google.com> Wed Apr 29 23:05:35 2020 -0700
tree 90fbe3508d48ab6d77bdf2ea68b5adf936ea94ba
parent bd162416785c0b157e600da633e27127927fffed

Add filtering for IPsec algorithms in IKEv2 VPNs

This commit adds support for validating and filtering IPsec algorithms.
Without a public API exposing IKEv2 algorithms (and their respective
public APIs), the allowedAlgorithms can only filter the proposals for
IPsec (Child) SA algorithms.

Additionally, this removes the HMAC_SHA1 from the IKE SA's integrity
algorithm proposals due to insecurity

Bug: 153701879
Test: FrameworksNetTests passing, new tests added
Change-Id: I7e61a1612692db275b751330af5bacbf86836a8c
Merged-In: I7e61a1612692db275b751330af5bacbf86836a8c
(cherry picked from commit 94e1c08a9ad4b0ff17e0f3a77fff0d3364040ba5)