[Openswan Users] Using 1DES :(

[Ted Kaczmarek]

On Wed, 2005-08-31 at 00:45 +0530, Rajkumar S wrote:
> Paul Wouters wrote:
> > I'd recommend using openswan-2, or at the very least openswan-1. openswan-1
> > is based off superfreeswan and has a few security fixes.
> > 
> > 1DES is not enabled or compiled in per default. For openswan-2, this is
> > changable by setting the USE_WEAKSTUFF=true in Makefile.inc.
> > 
> > I don't have access to an openswan-1 tree currently to see if it uses
> > the same variable.
> 
> Thanks a lot, I will try it tomorrow and let know the results.
> 
> raj
> _______________________________________________
You used to be able to get the 3Des support for free from Cisco, I
upgraded a pair of 515's before they where retired in favor of
OpenSwan/Iptables/Quagga boxes.


Ted