<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Hello,
<div class="">I an trying to setup parallel crypto, however I’m having issues with getting tcrypt and crconf to take the algorithms. I’ve tried following the instructions here: <a href="https://wiki.strongswan.org/projects/strongswan/wiki/Pcrypt#Expected-Result" class="">https://wiki.strongswan.org/projects/strongswan/wiki/Pcrypt#Expected-Result</a>,
but I’ve come up empty handed.</div>
<div class=""><br class="">
</div>
<div class="">
<pre style="font-family: Consolas, Menlo, 'Liberation Mono', Courier, monospace; margin: 1em 1em 1em 1.6em; padding: 8px; background-color: rgb(250, 250, 250); border: 1px solid rgb(226, 226, 226); border-top-left-radius: 3px; border-top-right-radius: 3px; border-bottom-right-radius: 3px; border-bottom-left-radius: 3px; width: auto; overflow-x: auto; overflow-y: hidden; color: rgb(54, 0, 12); font-size: 10.8px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class=""><code style="font-family: Consolas, Menlo, 'Liberation Mono', Courier, monospace; padding: 0px;" class="">modprobe tcrypt alg="pcrypt(authenc(hmac(sha256),cbc(aes)))" type=3</code></pre>
<div class=""><span style="font-family: HelveticaNeue;" class="">Gives me the following error:</span></div>
<div class=""><span style="font-family: HelveticaNeue;" class="">ERROR: could not insert ’tcrypt’: Unknown symbol in module, or unknown parameter (see dmesg)</span></div>
</div>
<div class=""><span style="font-family: HelveticaNeue;" class=""><br class="">
</span></div>
<div class=""><font face="HelveticaNeue" class="">And </font></div>
<div class="">
<pre style="font-family: Consolas, Menlo, 'Liberation Mono', Courier, monospace; margin: 1em 1em 1em 1.6em; padding: 8px; background-color: rgb(250, 250, 250); border: 1px solid rgb(226, 226, 226); border-top-left-radius: 3px; border-top-right-radius: 3px; border-bottom-right-radius: 3px; border-bottom-left-radius: 3px; width: auto; overflow-x: auto; overflow-y: hidden; color: rgb(54, 0, 12); font-size: 10.8px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class=""><code style="font-family: Consolas, Menlo, 'Liberation Mono', Courier, monospace; padding: 0px;" class="">crconf add driver "pcrypt(authenc(hmac(sha256),cbc(aes)))" type 3</code></pre>
<div class="">Gives me: </div>
<div style="font-family: HelveticaNeue;" class="">RTNETLINK answers: No such file or directory</div>
</div>
<div class=""><br class="">
</div>
<div class="">I’ve made sure to read the forums and mailing lists and haven’t found anything similar other than <a href="http://users.strongswan.narkive.com/m8FMnxaH/aes-gcm-for-esp#post11" class="">http://users.strongswan.narkive.com/m8FMnxaH/aes-gcm-for-esp#post11</a> however
I could not solve the issue with it, my config files are as follows:</div>
<div class=""><br class="">
</div>
<div class="">IPSec.conf: </div>
<div class="">
<div class="">``` </div>
<div class="">ipsec.conf - strongSwan IPsec configuration file</div>
<div class=""># This file does needs altering</div>
<div class=""><br class="">
</div>
<div class=""># basic configuration</div>
<div class=""><br class="">
</div>
<div class="">ca post-quantum</div>
<div class=""> cacert=ca-cert.pem</div>
<div class=""> auto=add</div>
<div class=""><br class="">
</div>
<div class="">config setup</div>
<div class=""> charondebug="ike 4, lib 4"</div>
<div class=""> # strictcrlpolicy=yes</div>
<div class=""> # uniqueids = no</div>
<div class=""><br class="">
</div>
<div class="">conn %default</div>
<div class=""> dpdaction=clear</div>
<div class=""> dpdtimeout=15s</div>
<div class=""> ikelifetime=60m</div>
<div class=""> keylife=20m</div>
<div class=""> rekeymargin=3m</div>
<div class=""> keyingtries=1</div>
<div class=""> keyexchange=ikev2</div>
<div class=""> ike=aes256-sha256-modp3072</div>
<div class=""> mobike=no</div>
<div class=""><br class="">
</div>
<div class="">conn nick-net </div>
<div class=""> left=192.168.221.58</div>
<div class=""> leftcert=remote-vpn-cert.pem</div>
<div class=""> leftid="C=GB, O=Post-Quantum, CN=<a href="http://remote-vpn.postquantum.net" class="">remote-vpn.postquantum.net</a>"</div>
<div class=""> right=192.168.221.43</div>
<div class=""> rightid="C=GB, O=Post-Quantum, CN=<a href="http://local-vpn.postquantum.net" class="">local-vpn.postquantum.net</a>"</div>
<div class=""> auto=add</div>
<div class="">```</div>
<div class=""><br class="">
</div>
<div class="">Strongswan.conf:</div>
<div class=""> ```</div>
<div class=""># strongswan.conf - strongSwan configuration file</div>
<div class=""># Refer to the strongswan.conf(5) manpage for details</div>
<div class=""># Configuration changes should be made in the included files</div>
<div class=""># This file does not need altering</div>
<div class=""><br class="">
</div>
<div class="">charon {</div>
<div class=""> load = random nonce aes sha1 sha2 sha3 chapoly pem pkcs1 gmp x509 curl mgf1 newhope revocation hmac stroke kernel-netlink socket-default updown ha</div>
<div class=""> multiple_authentication = no</div>
<div class=""> send_vendor_id = yes</div>
<div class=""><br class="">
</div>
<div class=""> # load_modular = yes</div>
<div class=""> plugins {</div>
<div class=""> include strongswan.d/charon/*.conf</div>
<div class=""> }</div>
<div class="">}</div>
<div class=""><br class="">
</div>
<div class="">#include strongswan.d/*.conf</div>
<div class="">```</div>
</div>
<div class="">Any advice is greatly appreciated,</div>
<div class="">Kind regards</div>
<div class="">Nick</div>
</body>
</html>