tree a6e7dcb2d22a5884ae0f58587009d760bc845eb7
parent ddc1b5ad24f53bb493386cf47e32099b0cf62d6b
author Remi NGUYEN VAN <reminv@google.com> 1646038947 +0900
committer Justin Dunlap <justindunlap@google.com> 1651526997 +0000

Disallow PAP authentication when MPPE is requested

MPPE cannot work if PAP is used as authentication, so it is not useful
to allow PAP authentication when MPPE is enforced: establishing the
tunnel would fail anyway with "MPPE required, but MS-CHAP[v2] auth not
performed".
Also users enforcing MPPE may assume that this means PAP will not be
used for authentication, so without this change MPPE enforcement gives a
false sense of security, as PAP uses plain-text credentials.

Bug: 201660636
Test: atest VpnTest
Merged-In: Ie318d45fe44294e97cf38da7f1834cf014cb4417
Change-Id: Ie318d45fe44294e97cf38da7f1834cf014cb4417
(cherry picked from commit 997a4a39268b4f3af7ccc388269b5eb1972d3624)
(cherry picked from commit 4f319df8ff5a4b9f2bc62cb17df972e40b57fc81)
Merged-In: Ie318d45fe44294e97cf38da7f1834cf014cb4417