[Openswan Users] Difference between algorithms wanted and algorithms found?

Martin T m4rtntns at gmail.com
Sat Dec 24 05:46:01 EST 2016


Hi,

in the output of "ipsec auto --status" I can see following algorithms
wanted and algorithms found statements:

000 "test":   IKE algorithms wanted:
AES_CBC(7)_128-SHA1(2)_000-MODP1024(2); flags=-strict
000 "test":   IKE algorithms found:  AES_CBC(7)_128-SHA1(2)_160-MODP1024(2)
000 "test":   ESP algorithms wanted: AES(12)_128-SHA1(2)_000;
pfsgroup=MODP1024(2); flags=-strict
000 "test":   ESP algorithms loaded: AES(12)_128-SHA1(2)_160

1) Am I correct that algorithms wanted are the ones stated with "ike"
and "phase2alg" configuration options and algorithms found are the
ones which are actually used?

2) Is there a way to list all possible supported algorithms?


thanks,
Martin


More information about the Users mailing list