[Openswan dev] NULL encryption help in IPSEC

[neha sharda]

Hi,
 
I downloaded openswan-2.4.0rc4.tar.gz from openswan.org and then I configured the file ipsec.conf for NULL encryption using esp=NULL. Further, I checked that the NULL encryption is implemented in the code (ESP_NULL), so 
 
1) I had set the value of the flag SUPPORT_ESP_NULL in the file spdb.c as shown below:

#define SUPPORT_ESP_NULL 1

2) Further, I had set "CONFIG_KLIPS_ENC_CRYPTOAPI=y" in defconfig file.

However, NULL encryption is not working at all. Could somebody guide me through this problem. I would really appreciate any kind of help.

Here is the setting of my ipsec.conf file:
 
---------------x-------------------x----------------------x
//ipsec.conf file

version  2.0   

 

config setup

   interfaces="ipsec0=eth1"

   plutodebug=all

#Disable Opportunistic Encryption

include /etc/ipsec.d/examples/no_oe.conf

 

conn ipv4-p1-p2

   left=193.127.1.1

   right=193.1.1.1

   connaddrfamily=ipv4

   authby=secret

   auth=ah

   ah=hmac-md5

   esp=NULL



   type=transport

   compress=no

   auto=start

 -----------------x---------------------x--------------------x

Thanks in advance,
Neha



__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/dev/attachments/20050902/7fabc05b/attachment.htm