Hi Paul, > Some note would be good because apparently strongswan insists of the > KEY_LENGTH attribute they shouldn’t be there?
Yes, we did that incorrectly before 5.6.3 [1]. Since then the key length attribute is omitted, but it's still possible to add a transform with it to a proposal by using the chacha20poly1305compat keyword (for compatibility with older releases). Regards, Tobias [1] https://wiki.strongswan.org/versions/69 _______________________________________________ IPsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/ipsec
