sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-09 00:00:53 -04:00
Code Issues Projects Releases Wiki Activity

applied aes-xcbc-96 to ike as well

Browse Source
This commit is contained in:
Andreas Steffen 2008-05-13 19:37:01 +00:00
parent 2e77a49c8c
commit 6878fa738a
8 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
testing/tests/ikev2/alg-aes-xcbc/description.txt Normal file
View File

@ -0,0 +1,4 @@
Roadwarrior <b>carol</b> proposes to gateway <b>moon</b> the ESP cipher suite
<b>AES_CBC-256/AES_XCBC_96</b> by defining <b>esp=aes256-aesxcbc-modp2048</b>
in ipsec.conf. The same cipher suite is used for IKE: <b>ike=aes256-aesxcbc-modp2048</b>.
A ping from <b>carol</b> to <b>alice</b> successfully checks the established tunnel.

0
testing/tests/ikev2/esp-alg-aesxcbc/evaltest.dat → testing/tests/ikev2/alg-aes-xcbc/evaltest.dat
View File

2
testing/tests/ikev2/esp-alg-aesxcbc/hosts/carol/etc/ipsec.conf → testing/tests/ikev2/alg-aes-xcbc/hosts/carol/etc/ipsec.conf
View File

@ -11,7 +11,7 @@ conn %default
rekeymargin=3m rekeymargin=3m
keyingtries=1 keyingtries=1
keyexchange=ikev2 keyexchange=ikev2
ike=aes256-sha256-modp2048! ike=aes256-aesxcbc-modp2048!
esp=aes256-aesxcbc-modp2048! esp=aes256-aesxcbc-modp2048!
conn home conn home

2
testing/tests/ikev2/esp-alg-aesxcbc/hosts/moon/etc/ipsec.conf → testing/tests/ikev2/alg-aes-xcbc/hosts/moon/etc/ipsec.conf
View File

@ -11,7 +11,7 @@ conn %default
rekeymargin=3m rekeymargin=3m
keyingtries=1 keyingtries=1
keyexchange=ikev2 keyexchange=ikev2
ike=aes256-sha256-modp2048! ike=aes256-aesxcbc-modp2048!
esp=aes256-aesxcbc-modp2048! esp=aes256-aesxcbc-modp2048!
conn rw conn rw

0
testing/tests/ikev2/esp-alg-aesxcbc/posttest.dat → testing/tests/ikev2/alg-aes-xcbc/posttest.dat
View File

0
testing/tests/ikev2/esp-alg-aesxcbc/pretest.dat → testing/tests/ikev2/alg-aes-xcbc/pretest.dat
View File

0
testing/tests/ikev2/esp-alg-aesxcbc/test.conf → testing/tests/ikev2/alg-aes-xcbc/test.conf
View File

4
testing/tests/ikev2/esp-alg-aesxcbc/description.txt
View File

@ -1,4 +0,0 @@
Roadwarrior <b>carol</b> proposes to gateway <b>moon</b> the ESP cipher suite
<b>AES_CBC-256/AES_XCBC_96</b> by defining <b>esp=aes256-aesxcbc-modp2048</b>
in ipsec.conf. A ping from <b>carol</b> to <b>alice</b> successfully checks
the established tunnel.