[strongSwan] How to specify AES128-XCBC as the PRF in strongswan-5.0.1?

gowrishankar gowrishankar.m at linux.vnet.ibm.com
Thu Oct 18 11:32:05 CEST 2012


Hi Martin,

On Thursday 18 October 2012 01:12 PM, Martin Willi wrote:
> Hi,
>
>> Is there any support if strongswan can provide to explicitly mention
>> IKE integrity and PRF, in future ?
> Yes. I've implemented this last week (the last three patches from [1]),
> it will be available in the next release.

Great. Thank you. Btw, I have also expressed the concern to do similar 
provisioning
for esp= param as well. Can the check be extended for PROTO_ESP too ?

Regards,
Gowri Shankar
> Regards
> Martin
>
> [1]http://git.strongswan.org/?p=strongswan.git;a=shortlog;h=refs/heads/prf-keywords
>
>
>





More information about the Users mailing list