[Swan-dev] AH and ESP
David McCullough
ucdevel at gmail.com
Tue Apr 22 02:37:56 EEST 2014
D. Hugh Redelmeier wrote the following:
> I learned from Paul on Tuesday that Libreswan does not support AH with
> ESP.
>
> Is this true for IKEv1 and IKEv2?
>
> I went to a lot of work when writing the v1 code to get the
> combinatorics of AH and ESP right. I imagine that the code can be
> simplified if there is no combining of AH and ESP.
>
> If they cannot be combined, why bother with AH at all? That ought to
> be an even more significant simplification.
I can't commment on the current state of the code, but I have used AH+ESP
combinations in the past and I think I may have run AH only at some point.
Most of this was during OCF testing,
Cheers,
Davidm
--
David McCullough, ucdevel at gmail.com, Ph: 0410 560 763
More information about the Swan-dev
mailing list