I'm looking for a program that I can use to test IKE negotiations and
authentication. Ideally I want something that will let me specify all of
the various parameters separately.
I've looked into using Pluto, but that isn't really flexible enough - for
one thing it doesn't support aggressive mode. I've also looked at
NIST's PlutoPlus which seems better suited (although it still doesn't
support aggressive mode) but this doesn't seem to be available for
download any more.
I'd like to have something which would let me specify the following:
1. Main Mode or aggressive mode
2. Cipher (and support at least DES and 3DES, preferably more)
3. Hash (support at least MD5 and SHA1; tiger would be nice)
4. DH Group (support at least groups 1 & 2; group 5 would be nice)
5. For aggressive mode, a choice of ID Types (at least ID_IPV4_ADDR,
ID_FQDN and ID_USER_FQDN)
With the ability to specify the ID value as well of course.
So far, I've found nothing suitable and have been writing my own C code
using the FreeS/WAN
header files and the RFCs as a guide. This is getting quite painful though
and I'm wondering if
there is something out these that I could use rather than writing my own code.
Roy Hills
-- Roy Hills Tel: +44 1634 721855 NTA Monitor Ltd FAX: +44 1634 721844 14 Ashford House, Beaufort Court, Medway City Estate, Email: Roy.Hills_at_nta-monitor.com Rochester, Kent ME2 4FA, UK WWW: http://www.nta-monitor.com/_______________________________________________ Users mailing list Users_at_lists.freeswan.org http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:20:18 CEST