From: Sam Sgro (sam_at_freeswan.org)
Date: Thu Aug 22 2002 - 22:36:56 CEST
-----BEGIN PGP SIGNED MESSAGE-----
On Tue, 20 Aug 2002, Jun Fong wrote:
> I am testing FreeSWAN 1.96 between two machines with RedHat 7.1. It runs
> fine with the default setting of 3des-md5-96. I want to use SHA1 for
> authentication, so I change the ipsec.conf by setting esp=3des-sha1-96.
> After I rerun, ipsec look still showed ESP_3DES_HMAC_MD5. How do I change
> ipsec.conf to use SHA1 ? Thanks.
FreeS/WAN automatically keys connections if you are using the "auto=xxx"
parameter in ipsec.conf, or manipulating the connection using the "ipsec auto"
command.
The esp setting is ignored unless you are manually keying the connection. To
do so, invoke the connection using the ipsec_manual command. You can use the
"manualstart" parameter in ipsec.conf to automatically start the connections
with FreeS/WAN. Read the man pages for ipsec_manual and ipsec.conf,
specifically.
- --
Sam Sgro
sam_at_freeswan.org
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: For the matching public key, finger the Reply-To: address.
iQCVAwUBPWVLa0OSC4btEQUtAQFQIAQAssIeYkrM7X4w4Dw3o41sbBECmbrzJQWQ
qb40DjlRa79uSw6WwOf2G1xOJPzrM5J7omqfXMy6iJbRw0oxUbe6+n/RJIAMh2RZ
Xa5oaIdHdBzRHAkuDyPVBn+PWnHXhEV1fmTQSRqbh5yl6o4v3Z1P6Tez5EMQ98F1
mxXtvIFo01w=
=Jjth
-----END PGP SIGNATURE-----
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.4 : Fri Aug 23 2002 - 04:19:51 CEST