Hello Arne, I don't understand openswan 2.x. It doesn't have SHA2 (which I use). Can't modularize ciphers; no blowfish (missing usual ALGs). I tried using cryptoapi's sha512 but that didn't work. I tried searching the openswan mailing list, found a couple of similar concerns, but no answers. Perhaps I'm asking some dumb questions? I've downgraded to 1.0.9 on kernel 2.4.32. Effectively, a 2.4 ucBering hybrid.
Here are the offending config lines: 2.4.32: CONFIG_KLIPS=m # # IPsec options (Openswan) # CONFIG_KLIPS_IPIP=y CONFIG_KLIPS_AH=y CONFIG_KLIPS_ESP=y CONFIG_KLIPS_ENC_3DES=y CONFIG_KLIPS_ENC_AES=y CONFIG_KLIPS_AUTH_HMAC_MD5=y CONFIG_KLIPS_AUTH_HMAC_SHA1=y CONFIG_KLIPS_ALG=y # CONFIG_KLIPS_IPCOMP is not set CONFIG_KLIPS_DEBUG=y CONFIG_IPSEC_NAT_TRAVERSAL=y 2.4.31 (the more familiar): CONFIG_IPSEC=m # # IPSec options (FreeS/WAN) # CONFIG_IPSEC_IPIP=y CONFIG_IPSEC_AH=y CONFIG_IPSEC_AUTH_HMAC_MD5=y CONFIG_IPSEC_AUTH_HMAC_SHA1=y CONFIG_IPSEC_ESP=y CONFIG_IPSEC_ENC_3DES=y CONFIG_IPSEC_ALG=y CONFIG_IPSEC_ALG_MD5=m CONFIG_IPSEC_ALG_SHA1=m CONFIG_IPSEC_ALG_SHA2=m <-- look sha2 CONFIG_IPSEC_ALG_3DES=m CONFIG_IPSEC_ALG_AES=m CONFIG_IPSEC_ALG_BLOWFISH=m <-- and all CONFIG_IPSEC_ALG_TWOFISH=m <-- these CONFIG_IPSEC_ALG_SERPENT=m <-- other CONFIG_IPSEC_ALG_CAST=m <-- ciphers CONFIG_IPSEC_ALG_NULL=m # CONFIG_IPSEC_ALG_CRYPTOAPI is not set # CONFIG_IPSEC_ALG_1DES is not set CONFIG_IPSEC_IPCOMP=y CONFIG_IPSEC_DEBUG=y CONFIG_IPSEC_NAT_TRAVERSAL=y Any thoughts on getting strongswan to work with ucBering? Arne Bernin wrote: > Hi all, > > i just finished packaging openswan 2.4.2 for bering-uclibc and did some > initial testing, i am just wondering if someone else is using > openswan/ipsec and is willing to test it, too. > > --arne > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 ------------------------------------------------------------------------ leaf-user mailing list: [email protected] https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
