tree 60cfab26435e0ef91598705057b6fabb9694cd8c
parent 6bc322fc77cf3814854565207e19868503046b1d
author Benedict Wong <benedictwong@google.com> 1586494145 -0700
committer Benedict Wong <benedictwong@google.com> 1586912856 -0700

Add filtering for IPsec algorithms in IKEv2 VPNs

This commit adds support for validating and filtering IPsec algorithms.
Without a public API exposing IKEv2 algorithms (and their respective
public APIs), the allowedAlgorithms can only filter the proposals for
IPsec (Child) SA algorithms.

Additionally, this removes the HMAC_SHA1 from the IKE SA's integrity
algorithm proposals due to insecurity

Bug: 153701879
Test: FrameworksNetTests passing, new tests added
Change-Id: I7e61a1612692db275b751330af5bacbf86836a8c