Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

FireBrick IPSEC on Apple MacOS X: Difference between revisions

← Older editNewer edit →
Content deleted Content added
AA-Andrew (talk | contribs)
autoreview, Bureaucrats, editor, Interface administrators, reviewer, Administrators
12,616 edits
AA-Andrew (talk | contribs)
autoreview, Bureaucrats, editor, Interface administrators, reviewer, Administrators
12,616 edits
Line 25: Line 25:
failed to create ESP context: unsupported integrity algorithm AES_XCBC_96
failed to create ESP context: unsupported integrity algorithm AES_XCBC_96


This really a bug in the way the StrongSwan app was built - it shouldn't negotiate something if the underlying OS can't do it! However, the easy workaround is to set up an ipsec-proposal to avoid this:
This really a bug in the way the StrongSwan app was built - it shouldn't negotiate AES if the underlying OS can't do it (which as of July 2015 OSX can't manage AES). However, the easy workaround is to set up an ipsec-proposal to avoid this:


#On the FB config editor create a 'Proposals for IPsec AH/ESP security association'.
#On the FB config editor create a 'Proposals for IPsec AH/ESP security association'.
Retrieved from "http://support.aa.net.uk/FireBrick_IPSEC_on_Apple_MacOS_X"