strongSwan

28.01.2021

10:14 strongSwan Issue #3683: IKEV2 connection fail to rekey process

...

09:31 strongSwan Issue #3683: IKEV2 connection fail to rekey process

Add strongswan log file.

09:27 strongSwan Issue #3683 (Feedback): IKEV2 connection fail to rekey process

I make connection between two hosts with Strongswan 5.8.1 on both sides. I use IKE v.2 To increase rekey events,
I ...

08.12.2020

12:24 strongSwan Issue #3654: The L2tp/ipsec tunnel interface will not be delete when the connect abnormal interrupt.

I thought it was related to ipsec keepalive time,so the interface and route rule is l2tp to create and not to detect ...

12:17 strongSwan Issue #3652: In strongswan ipsec.conf, how to set the "ike" parameters so that it can support all hash Algorithm and DH group server support?

So,if in ikev1 want to support all hash and dh group combinations,i have to enumerate all combination??
Ex:
aes128-...

12:07 strongSwan Issue #3654 (Feedback): The L2tp/ipsec tunnel interface will not be delete when the connect abnormal interrupt.

When first establish L2tp/ipsec tunnel success,the interface and route rule is only one element,...

11:34 strongSwan Issue #3652: In strongswan ipsec.conf, how to set the "ike" parameters so that it can support all hash Algorithm and DH group server support?

So,if i want to set multiple Hash Algorithm and DH group,
I can write as follows:
ike=aes128-md5-sha1-sha256-modp10...

04.12.2020

11:56 strongSwan Issue #3652 (Feedback): In strongswan ipsec.conf, how to set the "ike" parameters so that it can support all hash Algorithm and DH group server support?

In the* openswan config settings,"ike = 3des"*
This represents the connection use Encryption Algorithm "3des" and ...

11:33 strongSwan Issue #3542: Use ikev2 establish tunnel when rekeymargin greater than one-half ikelifetime will rekey frequently.

ok, With your explanation, I understand the weird behavior caused by the wrong setting.
Thanks.

12.11.2020

10:05 strongSwan Issue #3620: L2TP/IPSEC ipsec.conf setting

Hi Tobias,
I have read the [ipsec.conf[https://wiki.strongswan.org/projects/strongswan/wiki/Ipsecconf]],and I hav...