<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
</head>
<body class='hmmessage'>
Hi,<br><br>I am having problems getting StrongSwan to use ECP algorithms. I built with:<br><br>./configure --prefix /usr --sysconfdir=/etc --libexecdir=/usr/libexec --enable-openssl<br><br>But when I try to bring up a connection specifying:<br><br>ike=aes128-sha256-ecp256!<br>esp=aes128gcm16!<br><br>I get:<br><br>002 "suiteB" #1: initiating Main Mode<br>002 "suiteB" #1: ike alg: dh group ECP_256 not present<br>003 "suiteB" #1: empty ISAKMP SA proposal to send (no algorithms for ike selection?)<br><br>The openssl plugin appears to be loaded, as "ipsec statusall" shows:<br><br>000 loaded plugins: aes des sha1 sha2 md5 random x509 pubkey pkcs1 pgp dnskey pem openssl hmac gmp xauth attr resolve <br><br>But the algorithms don't show up in "ipsec listalgs":<br><br>000 encryption: BLOWFISH_CBC 3DES_CBC AES_CBC CAMELLIA_CBC<br>000 integrity: HMAC_MD5 HMAC_SHA1 HMAC_SHA2_256 HMAC_SHA2_384 HMAC_SHA2_512<br>000 dh-group: MODP_1024 MODP_1536 MODP_2048 MODP_3072 MODP_4096 MODP_6144 MODP_8192 MODP_1024_160 MODP_2048_224 MODP_2048_256<br><br>My kernel is 2.6.18 and I am using libcrypto.so.0.9.8e .<br><br>What am I doing wrong?<br><br>Regards,<br><br>Mike<br><br><br><br><br><br><br><br><br> </body>
</html>