<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hello strongSwan community,<div class=""><br class=""></div><div class=""><span id="docs-internal-guid-b310aa0c-7fff-a0a5-dcaa-33021183c277" class=""><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">As some may be aware, wolfSSL added support for strongSwan in April of 2019. The upstream commit can be reviewed here: </span><a href="https://github.com/strongswan/strongswan/pull/133" class="" style="text-decoration: none;"><span class="" style="font-size: 12pt; font-family: Arial; color: rgb(17, 85, 204); font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; text-decoration: underline; text-decoration-skip: none; vertical-align: baseline; white-space: pre-wrap;">https://github.com/strongswan/strongswan/pull/133</span></a></div><p dir="ltr" class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span></p><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">Users can test the latest development master of wolfSSL with the latest version of strongSwan using the following setup:</span></div><p dir="ltr" class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span></p><div dir="ltr" align="left" class="" style="margin-left: 0pt;"><table class="" style="border: none; border-collapse: collapse;"><colgroup class=""><col width="291" class=""><col width="333" class=""></colgroup><tbody class=""><tr class="" style="height: 282.25pt;"><td class="" style="border: 1pt solid rgb(0, 0, 0); vertical-align: top; padding: 5pt; overflow: hidden; overflow-wrap: break-word;"><p dir="ltr" class="" style="line-height: 1.38; margin-top: 3pt; margin-bottom: 3pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">## wolfSSL</span></p><br class=""><p dir="ltr" class="" style="line-height: 1.38; margin-top: 3pt; margin-bottom: 3pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">$ git clone</span><a href="https://github.com/wolfSSL/wolfssl.git" class="" style="text-decoration: none;"><span class="" style="font-size: 9pt; font-family: "Courier New"; color: rgb(0, 0, 0); font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 9pt; font-family: "Courier New"; color: rgb(17, 85, 204); font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; text-decoration: underline; text-decoration-skip: none; vertical-align: baseline; white-space: pre-wrap;">https://github.com/wolfSSL/wolfssl.git</span></a></p><div class="" style="line-height: 1.38; margin-top: 3pt; margin-bottom: 3pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><br class="webkit-block-placeholder"></div><p dir="ltr" class="" style="line-height: 1.38; margin-top: 3pt; margin-bottom: 3pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">$ cd wolfssl</span></p><br class=""><p dir="ltr" class="" style="line-height: 1.38; margin-top: 3pt; margin-bottom: 3pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">$ ./autogen.sh</span></p><br class=""><p dir="ltr" class="" style="line-height: 1.38; margin-top: 3pt; margin-bottom: 3pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">$ ./configure --enable-opensslall --enable-keygen --enable-rsapss --enable-des3 --enable-dtls --enable-certgen --enable-certreq --enable-certext --enable-sessioncerts --enable-crl --enable-ocsp CFLAGS="-DWOLFSSL_DES_ECB -DWOLFSSL_LOG_PRINTF -DWOLFSSL_PUBLIC_MP -DHAVE_EX_DATA"</span></p><br class=""><p dir="ltr" class="" style="line-height: 1.38; margin-top: 3pt; margin-bottom: 3pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">$ make</span></p><br class=""><p dir="ltr" class="" style="line-height: 1.38; margin-top: 3pt; margin-bottom: 3pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">$ make check</span></p><br class=""><p dir="ltr" class="" style="line-height: 1.38; margin-top: 3pt; margin-bottom: 3pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">$ sudo make install</span></p></td><td class="" style="border: 1pt solid rgb(0, 0, 0); vertical-align: top; padding: 5pt; overflow: hidden; overflow-wrap: break-word;"><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">## Strongswan</span></div><p dir="ltr" class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span></p><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"># if the following packages are not already installed:</span></div><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">$ sudo apt-get install flex bison byacc libsoup2.4-dev gperf</span></div><p dir="ltr" class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span></p><br class=""><br class=""><br class=""><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">$ git clone </span><a href="https://github.com/strongswan/strongswan.git" class="" style="text-decoration: none;"><span class="" style="font-size: 9pt; font-family: "Courier New"; color: rgb(17, 85, 204); font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; text-decoration: underline; text-decoration-skip: none; vertical-align: baseline; white-space: pre-wrap;">https://github.com/strongswan/strongswan.git</span></a></div><br class=""><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">$ cd strongswan</span></div><br class=""><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">$ ./autogen.sh</span></div><p dir="ltr" class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span></p><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">#if packages are missing autogen.sh must be re-run</span></div><br class=""><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">$ ./configure --disable-defaults --enable-pki --enable-wolfssl --enable-pem</span></div><br class=""><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">$ make</span></div><br class=""><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">$ make check</span></div><br class=""><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">$ sudo make install</span></div></td></tr></tbody></table></div><p dir="ltr" class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span></p><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">wolfSSL has had interest in enabling FIPS support with strongSwan so our engineers verified everything is working with the wolfCrypt FIPS 140-2 validated Module!</span></div><p dir="ltr" class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span></p><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">The steps used for testing are as follows:</span></div><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"><br class=""></span></div><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">Using the wolfSSL commercial FIPS release v4.7.0 which internally has the </span><span class="" style="font-size: 12pt; font-family: Arial; font-weight: 700; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">wolfCrypt v4.0.0</span><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> FIPS 140-2 validated Crypto Module, and was located in the </span><span class="" style="font-size: 12pt; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"><font face="Courier New" class="">/home/user-name/Downloads</font></span><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> directory on the target test system, </span><span class="" style="font-size: 12pt; font-family: Arial; font-weight: 700; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">Linux 4.15 Ubuntu 18.04 LTS</span><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">running on </span><span class="" style="font-size: 12pt; font-family: Arial; font-weight: 700; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">Intel(R) Xeon(R) CPU E3-1270 v6 @ 3.80GHz</span><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">.</span></div><p dir="ltr" class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span></p><div class="" style="line-height: 1.38; margin-left: 54pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">a.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">wolfSSL was configured and installed with these settings:</span></div><div class="" style="line-height: 1.38; margin-left: 18pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">i.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">./configure --enable-opensslall --enable-keygen --enable-rsapss --enable-des3 --enable-dtls --enable-certgen --enable-certreq --enable-certext --enable-sessioncerts --enable-crl --enable-ocsp CFLAGS="-DWOLFSSL_DES_ECB -DWOLFSSL_LOG_PRINTF -DWOLFSSL_PUBLIC_MP -DHAVE_EX_DATA -DFP_MAX_BITS=8192" --enable-ed25519 --enable-curve25519 --enable-fips=v2 --enable-intelasm --prefix=$(pwd)/../fips-install-dir</span></div><div class="" style="line-height: 1.38; margin-left: 18pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">ii.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">make</span></div><div class="" style="line-height: 1.38; margin-left: 18pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">iii.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">make install</span></div><div class="" style="line-height: 1.38; margin-left: 54pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">b.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">A custom install location was used which equated to </span><span class="" style="font-size: 11pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">/home/user-name/Downloads/fips-install-dir</span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> so the configuration for strongSwan accounted for this.</span></div><div class="" style="line-height: 1.38; margin-left: 54pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">c.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">strongSwan was cloned to </span><span class="" style="font-size: 11pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">/home/user-name/Downloads</span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> with “</span><span class="" style="font-size: 11pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">git clone </span><a href="https://github.com/strongswan/strongswan.git" class="" style="text-decoration: none;"><span class="" style="font-size: 11pt; font-family: "Courier New"; color: rgb(17, 85, 204); font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; text-decoration: underline; text-decoration-skip: none; vertical-align: baseline; white-space: pre-wrap;">https://github.com/strongswan/strongswan.git</span></a><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">”</span></div><div class="" style="line-height: 1.38; margin-left: 54pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">d.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">StongSwan was configure and installed with these settings:</span></div><div class="" style="line-height: 1.38; margin-left: 18pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">i.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">./configure --disable-defaults --enable-pki --enable-wolfssl --enable-pem --prefix=$(pwd)/../strongswan-install-dir wolfssl_CFLAGS="-I$(pwd)/../fips-install-dir/include" wolfssl_LIBS="-L$(pwd)/../fips-install-dir/lib -lwolfssl"</span></div><div class="" style="line-height: 1.38; margin-left: 18pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">ii.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">make</span></div><div class="" style="line-height: 1.38; margin-left: 18pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">iii.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">make install</span></div><div class="" style="line-height: 1.38; margin-left: 18pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">iv.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">make check</span></div><div class="" style="line-height: 1.38; margin-left: 54pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">e.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">In the make check stage of the test, it was observed that 1 test was failing.</span></div><div class="" style="line-height: 1.38; margin-left: 54pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 11pt; font-family: Arial; color: rgb(192, 0, 0); font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> i.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; color: rgb(192, 0, 0); font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; color: rgb(192, 0, 0); font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">Passed 34 of 35 'libstrongswan' suites</span></div><div class="" style="line-height: 1.38; margin-left: 90pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; color: rgb(192, 0, 0); font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">FAIL: </span><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">libstrongswan_tests</span></div><div class="" style="line-height: 1.38; margin-left: 90pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; color: rgb(192, 0, 0); font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">==================</span></div><div class="" style="line-height: 1.38; margin-left: 90pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; color: rgb(192, 0, 0); font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">1 of 1 test failed</span></div><div class="" style="line-height: 1.38; margin-left: 90pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; color: rgb(192, 0, 0); font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">==================</span></div><div class="" style="line-height: 1.38; margin-left: 54pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">f.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">Reviewing the logs t was apparent one of the RSA tests was failing.</span></div><div class="" style="line-height: 1.38; margin-left: 54pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">g.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">Upon further debugging it turned out the failure was a test in strongSwan that was attempting to create an RSA key size of 1536-bits.</span></div><span class=""> i. Running case 'generate':<br class=""></span><div class="" style="line-height: 1.38; margin-left: 90pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; color: rgb(84, 130, 53); font-weight: 700; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">DEBUG: key_sizes[_i] set to 1024</span></div><div class="" style="line-height: 1.38; margin-left: 90pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; color: rgb(84, 130, 53); font-weight: 700; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">+ PASS</span></div><div class="" style="line-height: 1.38; margin-left: 90pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; color: rgb(192, 0, 0); font-weight: 700; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">DEBUG: key_sizes[_i] set to 1536</span></div><div class="" style="line-height: 1.38; margin-left: 90pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; color: rgb(192, 0, 0); font-weight: 700; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">- FAIL</span></div><div class="" style="line-height: 1.38; margin-left: 90pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; color: rgb(84, 130, 53); font-weight: 700; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">DEBUG: key_sizes[_i] set to 2048</span></div><div class="" style="line-height: 1.38; margin-left: 90pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; color: rgb(84, 130, 53); font-weight: 700; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">+ PASS</span></div><div class="" style="line-height: 1.38; margin-left: 90pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; color: rgb(84, 130, 53); font-weight: 700; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">DEBUG: key_sizes[_i] set to 3072</span></div><div class="" style="line-height: 1.38; margin-left: 90pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; color: rgb(84, 130, 53); font-weight: 700; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">+ PASS</span></div><div class="" style="line-height: 1.38; margin-left: 90pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; color: rgb(84, 130, 53); font-weight: 700; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">DEBUG: key_sizes[_i] set to 4096</span></div><div class="" style="line-height: 1.38; margin-left: 90pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 9pt; font-family: "Courier New"; color: rgb(84, 130, 53); font-weight: 700; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">+ PASS</span></div><div class="" style="line-height: 1.38; margin-left: 54pt; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">h.</span><span class="" style="font-size: 6.999999999999999pt; font-family: "Times New Roman"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">wolfSSL has a function </span><span class="" style="font-size: 11pt; font-family: "Courier New"; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">RsaSizeCheck()</span><span class="" style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> which in FIPS mode will specifically reject any non FIPS RSA key sizes so this failure is not only expected, it is a good thing for those wanting to use strongSwan in FIPS mode and ensure only FIPS validated RSA key sizes will be supported!</span></div><p dir="ltr" class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span></p><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">wolfSSL is pleased to let the strongSwan community know that with the latest release of wolfSSL v4.7.0 and the wolfCrypt FIPS 140-2 module validated on </span><a href="https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/3389" class="" style="text-decoration: none;"><span class="" style="font-size: 12pt; font-family: Arial; color: rgb(17, 85, 204); font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; text-decoration: underline; text-decoration-skip: none; vertical-align: baseline; white-space: pre-wrap;">FIPS certificate 3389</span></a><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">, strongSwan support is working splendidly and wolfSSL engineers will be making efforts to ensure continued support into the future!</span></div><p dir="ltr" class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;"> </span></p><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class="" style="font-size: 12pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;">If you have any questions about wolfSSL, wolfCrypt FIPS, or strongSwan and wolfSSL together please contact our support staff anytime at “support [at] wolfssl [dot] com” or via our Zendesk portal by registering and opening a support incident at “wolfssl [dot] Zendesk [dot] com” anytime.</span></div></span></div><div class=""><div class=""><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><br class=""></div></div></div></div></div></div></div><div class="">
<div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Warmest Regards,</div><div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""></div><div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Kaleb Himes<br class="">Software Engineer<br class=""><a href="http://www.wolfssl.com" class="">www.wolfssl.com</a><br class=""><br class="">If you appreciate your experience with wolfSSL</div><div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">please leave us a star at <a href="https://github.com/wolfSSL/wolfssl" class="">https://github.com/wolfSSL/wolfssl</a>!<br class=""><br class="">TLS1.3 IS AVAILABLE in wolfSSL!<br class=""><br class=""><br class=""></div></div></div></div></div>
</div>
<br class=""></body></html>