On Thu, 23 Jul 2020 10:24:37 +0200 Pavol Hustý <[email protected]> wrote:
> I have running configuration libreswan with "ESP algorithm newest: > AES_CBC_256-HMAC_SHA1_96". > > Questions: How to force or set current configuration libreswan to ESP > algorithms with sha1 160 bit length. It is possible? No, there is no such version of HMAC_SHA1. Hashing key is always truncated with sha1 and sha2. With sha1 to 96 bits and with sha2_256 to 128 bits. -- Tuomo Soini <[email protected]> Foobar Linux services +358 40 5240030 Foobar Oy <https://foobar.fi/> _______________________________________________ Swan mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan
