[Swan-dev] AH and ESP

David McCullough ucdevel at gmail.com
Tue Apr 22 02:37:56 EEST 2014


D. Hugh Redelmeier wrote the following:
> I learned from Paul on Tuesday that Libreswan does not support AH with 
> ESP.
> 
> Is this true for IKEv1 and IKEv2?
> 
> I went to a lot of work when writing the v1 code to get the
> combinatorics of AH and ESP right.  I imagine that the code can be
> simplified if there is no combining of AH and ESP.
> 
> If they cannot be combined, why bother with AH at all?  That ought to
> be an even more significant simplification.

I can't commment on the current state of the code,  but I have used AH+ESP
combinations in the past and I think I may have run AH only at some point.
Most of this was during OCF testing,

Cheers,
Davidm

-- 
David McCullough,  ucdevel at gmail.com,   Ph: 0410 560 763


More information about the Swan-dev mailing list