Hi,
On Mon, Jul 26, 2010 at 09:45:05AM +0200, Martin Willi wrote:
However, strongSwan automatically uses any integrity algorithm
specified in a ike= proposal definition
This is a limitation inherited from the configuration syntax for IKEv1.
I don't know if it makes sense for real
Hi Jiri,
Currently, negotiated traffic selectors are only applied on SPs.
Certain situations require them in SAs as well.
Example (taken from a previously failig ipv6ready IKEv2.EN.I.1.1.7.1 test
case):
...
This patch makes strongSwan set the negotiated TSs the SAs it creates.
