[Openswan Users] how to change algorithm used in ESP or AH

ps ps at icpnet.pl
Sat Dec 3 17:19:39 CET 2005


Hello
I spent some time configuring openswan on SuSE box.
I have created new conn decalaration in /etc/ipsec.conf i.e. my-net2net
and everything was OK.
I'm wondering how can I change algorithm which is used for 
encrypting/authenticating traffic.
In my logs there are lines like this:

Dec  3 15:39:53 linux pluto[10248]: "net-to-net" #23: responding to 
Quick Mode {msgid:b1e7368b}
Dec  3 15:39:53 linux pluto[10248]: "net-to-net" #23: transition from 
state STATE_QUICK_R0 to state STATE_QUICK_R1
Dec  3 15:39:53 linux pluto[10248]: "net-to-net" #23: STATE_QUICK_R1: 
sent QR1, inbound IPsec SA installed, expecting QI2
Dec  3 15:39:53 linux pluto[10248]: "net-to-net" #23: transition from 
state STATE_QUICK_R1 to state STATE_QUICK_R2
Dec  3 15:39:53 linux pluto[10248]: "net-to-net" #23: STATE_QUICK_R2: 
IPsec SA established {ESP=>0x0d5c0bff <0xa394238b xfrm=AES_0-HMAC_SHA1 
NATD=none DPD=none}

I suppose that meens for encrypting AES was used and and for 
authenticating SHA1.
Can  I change this in conn declariation??

Thank you for any answers:)

Peter



My ipsec.conf
conn my-net2net
        type=tunnel
        left=left_pub_IP
        leftsubnet=left_priv_SUB
        leftnexthop=%defaultroute
        leftid=@host.domain.com
        leftrsasigkey=0soeiewfkjdkfjffreferfre...............
        right=right_pub_IP
        rightsubnet=right_priv_SUB
        rightnexthop=%defaultroute
        rightid=@other_host.domain.com
       rightrsasigkey=0skfjkjfkjfkjekjforei849r84............
        auto=add



More information about the Users mailing list