[Openswan Users] Does openswan 2.6.22 support ESP without authentication data?

Paul Wouters paul at xelerance.com
Wed Sep 23 13:13:06 EDT 2009


On Wed, 23 Sep 2009, êð wrote:

> Hi, everyone.
>> From my understanding for ipsec protocol, the ESP can optionally have authentication data or not. My question is :
> Does openswan 2.6.22 support  ESP without  authentication data?
> If  yes, what parameters should I set in my ipsec.conf?

No. ESP without authentication is insecure, and openswan does not support it.

Paul


More information about the Users mailing list