[Openswan Users] Getting Error in establishing Tunnels with Blowfish, serpent and Twofish
paul at xelerance.com
Wed Apr 9 20:33:38 EDT 2008
On Wed, 9 Apr 2008, ankit garg wrote:
> I am using Linux kernel 2.6.20 and openswan-2.5.18dr3 for creating tunnels.During kernel compilation in make menuconfig-->cryptographic options, i checked the options of Blowfish,Twofish and Serpent Cipher algorithms and installed new kernel
> In making openswan-2.5.18dr3, i am doing following step:-
> source:- http://wiki.openswan.org/index.php/BuildingFromTarballsFor2/6
> If i skip step3 and make openswan than i am able to establish tunnels between two hosts(both using linux kernel 2.6.20 and openswan-2.5.18dr3)with 3des,aes,aes128 and aes256 algorithms.But i am not able to establish tunnels with Blowfish,serpent and twofish algorithms.
> For Blowfish:-
> 003 "net-net": requested kernel enc ealg_id=7 not present
> 034 "net-net": can not initiate: no acceptable kernel algorithms loaded
These ciphers are not supported natively in the KLIPS code, so you will need to enable KLIPS CryptoAPI.
Even then, I am not sure if KLIPS has been tested with these.
More information about the Users