Hi Anthony, > Can openssl 1.0.2 support ESP SHA2 ? Since IPsec is usually processed by the kernel, OpenSSL is irrelevant for ESP handling. But any version of OpenSSL currently in use supports SHA-2. Regards, Tobias