[Openswan Users] how to change algorithm used in ESP or AH
ps
ps at icpnet.pl
Sat Dec 3 17:19:39 CET 2005
Hello
I spent some time configuring openswan on SuSE box.
I have created new conn decalaration in /etc/ipsec.conf i.e. my-net2net
and everything was OK.
I'm wondering how can I change algorithm which is used for
encrypting/authenticating traffic.
In my logs there are lines like this:
Dec 3 15:39:53 linux pluto[10248]: "net-to-net" #23: responding to
Quick Mode {msgid:b1e7368b}
Dec 3 15:39:53 linux pluto[10248]: "net-to-net" #23: transition from
state STATE_QUICK_R0 to state STATE_QUICK_R1
Dec 3 15:39:53 linux pluto[10248]: "net-to-net" #23: STATE_QUICK_R1:
sent QR1, inbound IPsec SA installed, expecting QI2
Dec 3 15:39:53 linux pluto[10248]: "net-to-net" #23: transition from
state STATE_QUICK_R1 to state STATE_QUICK_R2
Dec 3 15:39:53 linux pluto[10248]: "net-to-net" #23: STATE_QUICK_R2:
IPsec SA established {ESP=>0x0d5c0bff <0xa394238b xfrm=AES_0-HMAC_SHA1
NATD=none DPD=none}
I suppose that meens for encrypting AES was used and and for
authenticating SHA1.
Can I change this in conn declariation??
Thank you for any answers:)
Peter
My ipsec.conf
conn my-net2net
type=tunnel
left=left_pub_IP
leftsubnet=left_priv_SUB
leftnexthop=%defaultroute
leftid=@host.domain.com
leftrsasigkey=0soeiewfkjdkfjffreferfre...............
right=right_pub_IP
rightsubnet=right_priv_SUB
rightnexthop=%defaultroute
rightid=@other_host.domain.com
rightrsasigkey=0skfjkjfkjfkjekjforei849r84............
auto=add
More information about the Users
mailing list