[strongSwan] Sudden issues with Windows 10 clients

Jafar Al-Gharaibeh jafar at atcorp.com
Wed May 9 16:40:15 CEST 2018

Hi Tobias,

     Thanks for the correction.   What I meant to say is :

              The PRF algorithm is derived from the integrity algorithm, 
but only if a DH group is also configured.



On 5/9/2018 2:21 AM, Tobias Brunner wrote:
> Hi Jafar,
>>       No need to configure a prf, it is already assumed when you
>> configured a DH group; so you can drop prfsha256.
> Small correction, the PRF algorithm, if not configured explicitly, is
> not derived from the DH group, but the integrity algorithm, in this case
> sha256.
> Regards,
> Tobias

More information about the Users mailing list