<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><DIV>Thanks very much, Martin. I guess I had two problems, but this did correctly address the ECP_256 issue. (the other is also resolved now too) I -thought- that I'd disabled those plugin registrations, but I had not done so as you pointed out.</DIV>
<DIV> </DIV>
<DIV>Thanks again for the response.</DIV>
<DIV> </DIV>
<DIV>Dave<BR></DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"><BR>
<DIV style="FONT-SIZE: 13px; FONT-FAMILY: arial, helvetica, sans-serif"><FONT face=Tahoma size=2>
<HR SIZE=1>
<B><SPAN style="FONT-WEIGHT: bold">From:</SPAN></B> Martin Willi <martin@strongswan.org><BR><B><SPAN style="FONT-WEIGHT: bold">To:</SPAN></B> David Spracklen <david_spracklen@yahoo.com><BR><B><SPAN style="FONT-WEIGHT: bold">Cc:</SPAN></B> users@lists.strongswan.org<BR><B><SPAN style="FONT-WEIGHT: bold">Sent:</SPAN></B> Wed, July 28, 2010 2:43:49 AM<BR><B><SPAN style="FONT-WEIGHT: bold">Subject:</SPAN></B> Re: [strongSwan] SQL and IKE/ESP<BR></FONT><BR>Hi Dave,<BR><BR>> I am trying to use SQL with ECDSA. The log showed my cert was read in<BR>> correctly, but there was a mention that ECP_256 was not supported. <BR><BR>ECDSA is usually independent of ECDH, I don't think this is related to<BR>your certificate.<BR><BR>> The DH implementation we're using doesn't support this<BR><BR>The default proposals are constructed using the registered algorithms<BR>[1]. In contrast to a ipsec.conf based configuration, no additional<BR>algorithms [2]
are attached.<BR><BR>If your plugin does not support ECP_256, you should not register that<BR>algorithm. The OpenSSL plugin does plugin registration at [3].<BR><BR>Regards<BR>Martin<BR><BR>[1]http://git.strongswan.org/?p=strongswan.git;a=blob;f=src/libcharon/config/proposal.c;h=e8639302896e1b0635014e49500b319b1fe966f4;hb=HEAD#l766<BR>[2]http://git.strongswan.org/?p=strongswan.git;a=blob;f=src/starter/confread.c;h=399e17844d60b763811e08bb783628508620cf8d;hb=HEAD#l35<BR>[3]http://git.strongswan.org/?p=strongswan.git;a=blob;f=src/libstrongswan/plugins/openssl/openssl_plugin.c;h=31697dcb893d5e668a9b1df552cf44321edd2cd1;hb=HEAD#l290<BR><BR><BR></DIV></DIV></div><br>
</body></html>