[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(usagi-users 02168) Two questions about IPSec & algorithms



Hello all:

I'm running Red Hat Linux 7.3 with the latest USAGI snap (January 6, 2003). 

First question:
I've built IPSec tunnels between a FreeBSD 4.7 box and the USAGI implementation successfully using 3DES encryption, but when I try to force rinjdael encryption the connections fails because no proposal is chosen. The output showed by Pluto is the following:
unsupported ESP Transform ESP_AES from <peer-address>.

The configuration statement I use for Pluto configuration is esp=aes128-sha1 (I only could find examples with 3des encryption, so I did it as Juanjo's algorithms patch do for FreeS/WAN). Anybody has tried this before?, What should I do?.

Second question:
I've read in the IPSec HOWTO document that, in order to include other algorithms, I should copy the file called patch-int-2.4.19.2.bz2 to linux24/crypto/cipher/, 
and comment out related part of cipher/{Config.in, Makefile}. Just this?,I suppose that patch command must be applied, but I don't know wich options should be employed. 

Thank you very much.

Regards.

Javi Garzon.