Comments (2)
Hmmm strange, since on my hosts strongSwan 6 Beta 5 is using KYBER_L3
based on liboqs-0.9.1
without any issues:
$ swanctl --version --daemon
strongSwan 6.0.0beta5 charon-systemd (Linux, 6.2.0-39-generic, x86_64)
$ swanctl --list-sas
home: #1, ESTABLISHED, IKEv2, e11ab5e6e3811de0_i* 468536e17582c2e8_r
local 'mijas.strongsec.com' @ 10.10.1.64[4500] [10.10.1.66]
remote 'vpn.strongswan.org' @ 10.10.0.150[4500]
AES_CBC-256/HMAC_SHA2_384_192/PRF_HMAC_SHA2_384/CURVE_25519/KE1_KYBER_L3
established 141s ago, rekeying in 13859s, reauth in 8179s
home: #1, reqid 1, INSTALLED, TUNNEL, ESP:AES_GCM_16-256
installed 142s ago, rekeying in 3316s, expires in 3819s
in c7573bf5, 15306 bytes, 84 packets, 1s ago
out ccca2ce2, 16253 bytes, 99 packets, 1s ago
local 10.10.1.66/32
remote 0.0.0.0/0 ::/0
with
$ ls -l /usr/lib/x86_64-linux-gnu/liboqs.so*
lrwxrwxrwx 1 root root 11 Dez 28 08:55 /usr/lib/x86_64-linux-gnu/liboqs.so -> liboqs.so.4
-rw-r--r-- 1 root root 4244864 Dez 28 08:54 /usr/lib/x86_64-linux-gnu/liboqs.so.0.9.1
lrwxrwxrwx 1 root root 15 Dez 28 08:55 /usr/lib/x86_64-linux-gnu/liboqs.so.4 -> liboqs.so.0.9.1
Does the following command show the KYBER KE algorithms?
$ swanctl --list-algs
...
ke:
MODP_3072[openssl]
...
KYBER_L1[oqs]
KYBER_L3[oqs]
KYBER_L5[oqs]
from strongswan.
@strongX509, Thank you very much for your help:)
Reinstallation + reboot solved the problem
from strongswan.
Related Issues (20)
- android11 can't use "IKEv2/IPSec MSCHAPv2" to connect strongswanVPN server
- "<child>.local_ts" Dynamic acquisition of network card IP address HOT 2
- I used a tester to test VPN throughput and found that charon’s memory usage was high and was killed by the kernel. Is there any solution to limit memory usage? HOT 13
- Build of version 5.9.14 fails on alpine (musl) HOT 1
- ubuntu make error
- proposal_keywords.c is excluded by the .gitignore file HOT 2
- charon-nm: only a single CA cert file is loaded from "server certificate" file HOT 3
- add logger configuration for json output HOT 4
- Add support for the post-quantum ML-KEM KE algorithm in openssl plugin
- Routing regression between 5.9.8 (Debian Bookworm deb12u1) and 5.9.13 (Ubuntu 24.04 (2ubuntu4)) HOT 10
- libstrongswan rsa test getting hang sporadically with strongswan 5.9.6 HOT 2
- "Invalid ELF image for this architecture" error while running tests suite in strongswan HOT 1
- Confusing loading state in Battery Saver HOT 1
- "Invalid ELF image for this architecture" error while running tests suite in strongswan 5.8.4 version HOT 5
- Are there plans to adapt HarmonyOS in the future? HOT 2
- "printf_hooks" test failure in strongswan 5.9.13 version HOT 2
- Always list first usable address as base in the output of swanctl --list-pools command
- multiple subnet but only one establishing
- swanctl ignores load=no for plugins HOT 1
- "Stream tests and http fetcher tests" failing on strongswan 5.9.13 HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from strongswan.