To implement IPsec, SSR leverages a third-party client called libreswan
. The client periodically deprecates weak algorithms from its code base such as dh2 (a.k.a modp1024
) and dh22. While the SSR supports these algorithms, it is very likely that these algorithms will be deprecated in the near future. The article is meant to raise awareness of this upcoming change and provide instruction to proactively modify configuration to avoid outages.