On Tue, 16 Feb 2016 17:15:46 +0100, Alessandro Guido <[email protected]> wrote: > > strongSwan supports the ChaCha20/Poly1305 algorithm since version 5.3.3. > Such algo is supposedly faster than AES on machines w/o hardware > acceleration. > I suggest to include --enable-chapoly [1] when running the configure script.
I just checked the sid and experimental repo, still not fixed. This patch has been submitted for over 2 years, and is actually working. I recommend merging the patch now. Benefit for the fix: strongSwan has a certain problem that does not warn you if you configure ChaCha20Poly1305 with this plugin missing, but stops working with weird errors if any client tries to negotiate this cipher, making system administrators puzzled troubleshooting this problem. By merging the patch can we solve the problem. Best regards, StarBrilliant
