[Openswan Users] OAKLEY_DES_CBC is not supported. Attribute OAKLEY_ENCRYPTION_ALGORITHM

[Damir Reic]

Hello,

 

can anyone tell me what does this message mean?

 

I have  this info from remote side:

 

 

*Remote Secure Group 

    Opcion= IP Addr 

    Ip Interna = xxxxxxxxxxxxxxxx   

*Remote Gateway 

    Opcion= IP Addr 

    IUSACELL IP = xxxxxxxxxxxxxxxxxxx

   Encryption: 3DES 

    Authentication: SHA   

 *KEY Management  

       -------------- 

        Auto IKE 

     PFS= Disabled 

         

        PSK=  pass 

        Key Lifetime: 3600s

 

*Key grupo 1 

                    ------------ 

                    3DES 

                    SHA-1 

                    1024-bit 

                    28800 

                    

*Key grupo 2 

                    ------------ 

                    3DES 

                    SHA 

                    1024it 

                    PFS (Off) 

                    3600

 

 

 

This is my config:

 

 

 

config setup

        # Debug-logging controls:  "none" for (almost) none, "all" for lots.

        # klipsdebug=none

        # plutodebug="control parsing"

        #plutodebug="all"

        # For Red Hat Enterprise Linux and Fedora, leave protostack=netkey

        protostack=netkey

        #nat_traversal=yes

 
virtual_private=%v4:172.16.0.0/12,%v4:192.168.0.0/16,%v4:10.0.0.0/8,%v4:!10.
1.1.0/24

        oe=off

        # Enable this if you see "failed to find any available worker"

        # nhelpers=0

 

conn host-to-host1

        left=1.1.1.1

        #leftnexthop=%defaultroute

        leftsubnet=1.1.1.1/32

        right=2.2.2.2

        rightsubnet=2.2.2.3/32

        #rightnexthop=%defaultroute

        auto=start

        keyexchange=ike

        authby=secret

        ike=3des-sha1;modp1024

        phase2=esp

        phase2alg=3des-sha1;modp1024

        ikelifetime=28800s

        salifetime=3600s

        pfs=no

        type=tunnel

#       rekey=yes

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openswan.org/pipermail/users/attachments/20130323/c7c22969/attachment.html>