[Swan] How to disable "authentication" on libreswan 3.12?

Paul Wouters paul at nohats.ca
Wed Oct 28 22:46:29 UTC 2015


It is not supported by design because it is fundamentally insecure.

Only AEAD ciphers can have null authentication (because auth is builtin to the encryption protocol)

Paul

Sent from my iPhone

> On Oct 28, 2015, at 22:16, ChenHao <earthlovepython at outlook.com> wrote:
> 
> Hi All:
> 
> On Solaris, I can disable "authentication" on phase 2 . But how to do that in libreswan ?
> 
> I tried "phase2alg=3des-null;modp1024" .  libreswan can NOT recognize it at all. 
> 
> Any idea ?
> 
> Thanks and regards
> 
> 
> _______________________________________________
> Swan mailing list
> Swan at lists.libreswan.org
> https://lists.libreswan.org/mailman/listinfo/swan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20151028/0750800a/attachment-0001.html>


More information about the Swan mailing list