Source: strongswan Version: 5.0.4-3 Severity: wishlist Hello Yves-Alexis and Rene, per private email discussion you asked that I submit feature requests through the BTS.
Please enable the ‘af-alg’ plugin. This plugin enables an additional
crypto library, the Linux Kernel AF_ALG interface. This plugin is
marked as stable according to the PluginList¹ wiki.
I have tested that when enabling strongswan.conf
libstrongswan.crypto_test.bench and libstrongswan.crypto_test.on_add,
the output of ‘ipsec listalgs’ changes such that it indicates the
fastest benchmarked crypto library in use (rather than module load
order), af-alg is often chosen. Why not enable [slightly] faster
implementations exported by the kernel?
ifeq ($(DEB_BUILD_ARCH_OS),linux)
CONFIGUREARGS += --enable-af-alg
…
dh_install -p libstrongswan usr/lib/ipsec/plugins/libstrongswan-af-alg.so
endif
¹ https://wiki.strongswan.org/projects/strongswan/wiki/PluginList
-- System Information:
Debian Release: 7.1
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.9-0.bpo.1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
--
Gerald Turner Email: [email protected] JID: [email protected]
GPG: 0xFA8CD6D5 21D9 B2E8 7FE7 F19E 5F7D 4D0C 3FA0 810F FA8C D6D5
pgp4jj0f0bmmA.pgp
Description: PGP signature
