[strongSwan] Issue with AES-GCM algo on strongswan

Tobias Brunner tobias at strongswan.org
Tue Jul 7 09:35:09 CEST 2015


Hi,

> load = aes128gcm128 aes des sha1 sha2 md5 pem pkcs1 gmp random nonce
> x509 curl revocation hmac stroke kernel-netlink socket-default fips-prf
> eap-identity eap-aka eap-aka-3gpp2 updown

There is no aes128gcm128 plugin.  You need either the openssl plugin, or
the gcm plugin (together with the aes plugin).  These plugins obviously
have to be built first (if they are you won't need a custom load
statement in strongswan.conf as they should be loaded automatically).

Regards,
Tobias



More information about the Users mailing list