[Openswan Users] Encapsule SIP message

[Paul Wouters]

On Tue, 24 Feb 2009, ALAEDDINE abbech wrote:

> hi all
> i want secure the SIP message but when i do a tcpdump i see the signalisation clear.

You are probably using netkey (ipsec --version), so you wont see crypto
going out. Check from the other side that it is coming in crypted.

Paul

> my ipsec.conf :
> version 2.0 # conforms to second version of ipsec.conf specification
> 
> # basic configuration
> config setup
> # Debug-logging controls: "none" for (almost) none, "all" for lots.
> # klipsdebug=none
> # plutodebug="control parsing"
>         interfaces="ipsec0=eth0"
>         nat_traversal=no
>         oe=off
>         protostack=netkey
> conn astaa
>         left=IP_PROXY_SIP_1
>         leftsubnet=IP_PROXY_SIP_1/32
>         right=IP_PROXY_SIP_2
>         rightsubnet=IP_PROXY_SIP_2/32
>         esp=3des-md5-96
>         auto=start
>         authby=secret
>         type=transport
>         forceencaps=yes
> 
> What is my fault?
> how parametre i must add it??
> 
> thanks
> 
> 
> 
>