[strongSwan-dev] How to configure openssl

Andreas Steffen andreas.steffen at strongswan.org
Mon Mar 28 12:30:28 CEST 2011


Hello Aaron,

the linking to the OpenSSL library should be done automatically.
Just make sure that the strongSwan openssl plugin is loaded.
You can verify this with the command

  ipsec statusall

which should produce the following output:

  loaded plugins: curl aes des sha1 sha2 md5 pem pkcs1 gmp x509 openssl
revocation random hmac stroke kernel-netlink socket-default updown

If you built strongSwan with the --enable-openssl in a source
directory where you first built strongSwan with the default plugins,
make sure to execute

  make clean

before make and make install so that the implicit plugin load list
will be updated and will include the openssl plugin.

A configuration example can be found here:

http://www.strongswan.org/uml/testresults/openssl-ikev2/alg-ecp-high/

Regards

Andreas

On 28.03.2011 11:34, Aaron (Bo) Zhang wrote:
> Hi all,
> 
>  
> 
> I want to use the openssl lib to test the ECP group. It is highly
> appreciated that anyone can give me a example. I have built the
> strongswan with the configuration “--enable- openssl” and I also built
> the openssl lib. But I do not know how to link the openssl lib to
> strongswan.
> 
>  
> 
> Thanks
> 
> --Aaron

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==




More information about the Dev mailing list