[strongSwan] How to specify the prf algorithm in ikev2

Yatong Cui yacui at redhat.com
Tue Oct 19 10:45:48 CEST 2010


Hi all,

In ipsec.conf,we could actually specify the ike=encryption-integrity-DH group;
so how could i change the prf algorithm being used ?
Like if there are 2 requirements:
the first one would be: PRF(HMAC_SHA1 and AES128_CBC) and Integrity (HMAC_SHA1_96)
the secound one would be: PRF(HMAC_SHA1) and Integrity(HMAC_SHA1_96 and AES_XCBC_96)
how should i configure this file to satisfy the above requirements?

Thanks for your help in advance.

Regards
Frank




More information about the Users mailing list