I solved this in openswan-2.4.9 with the following:<br><br>--- programs/spi/spi.c.orig Sun Jan 18 05:48:16 2009<br>+++ programs/spi/spi.c Sun Jan 18 05:48:41 2009<br>@@ -420,7 +420,7 @@ int decode_esp(char *algname)<br>
} else if(!strcmp(algname, "3des")) {<br> esp_alg = XF_ESP3DES;<br> #ifdef KERNEL_ALG<br>- } else if((alg_info=alg_info_esp_create_from_str(algname, &alg_err, FALSE))) {<br>+ } else if((alg_info=alg_info_esp_create_from_str(algname, &alg_err, TRUE))) {<br>
int esp_ealg_id, esp_aalg_id;<br> <br> esp_alg = XF_OTHER_ALG;<br><br>Does it look okay?<br><br>Thanks for you time.<br><br>Regards,<br>-hiren<br><br><div class="gmail_quote">On Wed, Jan 28, 2009 at 11:55 PM, Paul Wouters <span dir="ltr"><<a href="mailto:paul@xelerance.com">paul@xelerance.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">On Wed, 28 Jan 2009, hiren joshi wrote:<br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Date: Wed, 28 Jan 2009 20:38:05 +0530<br>
From: hiren joshi <<a href="mailto:joshihirenn@gmail.com" target="_blank">joshihirenn@gmail.com</a>><br>
To: <a href="mailto:users@openswan.org" target="_blank">users@openswan.org</a><br>
Subject: [Openswan Users] manual keying: encryption-only connection with DES<div class="Ih2E3d"><br>
<br>
Hello,<br>
<br>
I tried to setup a manually keyed encryption-only connection with DES<br>
(for compatibility reasons).<br>
But failed.<br>
</div></blockquote>
<br>
Did you set USE_WEAKSTUFF=true and USE_NOCRYPTO=true in Makefile.inc ?<br>
<br>
Though really, I'm tempted to again rip out all of 1DES. It was unsafe<br>
5 years ago, it is even more unsafe now.<br><font color="#888888">
<br>
Paul<br>
</font></blockquote></div><br>