<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi,<div class=""><br class=""></div><div class="">Can the auth keysize minima be lowered?</div><div class=""><br class=""></div><div class="">the rightside (<span style="font-family: Verdana, sans-serif;" class=""> </span><span style="font-family: Verdana, sans-serif;" class="">Juniper SRX</span>) only supports these:</div><div class=""> hmac-md5-96 HMAC-MD5-96 authentication algorithm<br class=""> hmac-sha-256-128 HMAC-SHA-256-128 authentication algorithm<br class=""> hmac-sha-256-96 HMAC-SHA-256-96 authentication algorithm (non-RFC compliant)<br class=""> hmac-sha1-96 HMAC-SHA1-96 authentication algorithm<br class=""><br class=""></div><div class=""><br class=""></div><div class="">libreswan:</div><div class="">000 algorithm AH/ESP auth: id=1, name=AUTH_ALGORITHM_HMAC_MD5, keysizemin=128, keysizemax=128</div><div class="">000 algorithm AH/ESP auth: id=2, name=AUTH_ALGORITHM_HMAC_SHA1, keysizemin=160, keysizemax=160</div><div class="">000 algorithm AH/ESP auth: id=5, name=AUTH_ALGORITHM_HMAC_SHA2_256, keysizemin=256, keysizemax=256</div><div class=""> </div><div class=""><br class=""></div><div class="">which are all higher than the keysizemin of the juniper.</div><div class=""><br class=""></div><div class="">I’m on centos7 with libreswan.x86_64 3.12-10.1.el7_1 , with backports by redhat.</div><div class=""><br class=""></div><div class="">How to make this work?</div><div class=""><br class=""></div><div class="">Rgds,</div><div class="">Frank.</div><div class=""><br class=""></div></body></html>