[Openswan dev] ESP Null (RFC 2410)

[Kabir Ahsan-r9aahw]

Thanks Paul! The link you provided shows the test results and so on but
not the actual configuration files. Do you have any example
configuration file for authentication protocol only? I googled but no
luck! I tried my own configuration file with pfs=yes but things are not
working. Is the the OCF-based Openswan authentication protocol tested? 
Thanks
-ahsan 

-----Original Message-----
From: Paul Wouters [mailto:paul at xelerance.com] 
Sent: Tuesday, October 02, 2007 11:02 AM
To: Kabir Ahsan-r9aahw
Cc: Dev at openswan.org
Subject: RE: [Openswan dev] ESP Null (RFC 2410)

On Tue, 2 Oct 2007, Kabir Ahsan-r9aahw wrote:

> Thanks Paul! I was also wandering whether authentication protocol is 
> tested for openswan.

http://testing.openswan.org/

>   auth=ah
>   pfs=yes

Uhm, I don't think you can have perfect forward secrecy without
encryption?

Paul
--
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155