Hi,
I am having problems getting StrongSwan to use ECP algorithms. I built with:
./configure --prefix /usr --sysconfdir=/etc --libexecdir=/usr/libexec
--enable-openssl
But when I try to bring up a connection specifying:
ike=aes128-sha256-ecp256!
esp=aes128gcm16!
I get:
002 "suiteB" #1: initiating Main Mode
002 "suiteB" #1: ike alg: dh group ECP_256 not present
003 "suiteB" #1: empty ISAKMP SA proposal to send (no algorithms for ike
selection?)
The openssl plugin appears to be loaded, as "ipsec statusall" shows:
000 loaded plugins: aes des sha1 sha2 md5 random x509 pubkey pkcs1 pgp dnskey
pem openssl hmac gmp xauth attr resolve
But the algorithms don't show up in "ipsec listalgs":
000 encryption: BLOWFISH_CBC 3DES_CBC AES_CBC CAMELLIA_CBC
000 integrity: HMAC_MD5 HMAC_SHA1 HMAC_SHA2_256 HMAC_SHA2_384 HMAC_SHA2_512
000 dh-group: MODP_1024 MODP_1536 MODP_2048 MODP_3072 MODP_4096 MODP_6144
MODP_8192 MODP_1024_160 MODP_2048_224 MODP_2048_256
My kernel is 2.6.18 and I am using libcrypto.so.0.9.8e .
What am I doing wrong?
Regards,
Mike
_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users
