Hi, > strongwan complains that configured DH group ECP_224 not supported. > The #openssl ciphers -v 'ECDH' gives the below output, which > implies that, openssl has been compiled with ECDH support.
Just switching OpenSSL's libcrypto is not sufficient. You'll have to build the strongSwan openssl plugin against the new OpenSSL headers. Specifically, you'll have to make sure you include the correct opensslconf.h that provides the appropriate OPENSSL_NO_*-defines for your OpenSSL feature set, see [1]. Regards Martin [1]http://git.strongswan.org/?p=strongswan.git;a=blob;f=src/libstrongswan/plugins/openssl/openssl_plugin.c;hb=HEAD#l265 _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
