/testing/guestbin/swan-prep
west #
 ipsec start
Redirecting to: [initsystem]
west #
 ../../guestbin/wait-until-pluto-started
west #
 echo "initdone"
initdone
west #
 cp PATH/share/crypto-policies/back-ends/DEFAULT/libreswan.config /tmp/west-add.conf
west #
 ipsec auto --add test
"test": added unoriented IKEv2 connection (neither left=1.2.3.4 nor right=5.6.7.8 match an interface)
west #
 ipsec status | grep algorithms: # DEFAULT
"test":   IKE algorithms: AES_GCM_16_256-HMAC_SHA2_512+HMAC_SHA2_256-DH19+MODP2048+DH31+DH21+DH20+MODP3072+MODP4096+MODP8192, CHACHA20_POLY1305-HMAC_SHA2_512+HMAC_SHA2_256-DH19+MODP2048+DH31+DH21+DH20+MODP3072+MODP4096+MODP8192, AES_CBC_256-HMAC_SHA2_512+HMAC_SHA2_256-DH19+MODP2048+DH31+DH21+DH20+MODP3072+MODP4096+MODP8192, AES_GCM_16_128-HMAC_SHA2_512+HMAC_SHA2_256-DH19+MODP2048+DH31+DH21+DH20+MODP3072+MODP4096+MODP8192, AES_CBC_128-HMAC_SHA2_256-DH19+MODP2048+DH31+DH21+DH20+MODP3072+MODP4096+MODP8192
"test":   ESP algorithms: AES_GCM_16_256-NONE, CHACHA20_POLY1305-NONE, AES_CBC_256-HMAC_SHA2_512_256+HMAC_SHA1_96+HMAC_SHA2_256_128, AES_GCM_16_128-NONE, AES_CBC_128-HMAC_SHA1_96+HMAC_SHA2_256_128
west #
 rm /tmp/west-add.conf
west #
 #
west #
 cp PATH/share/crypto-policies/back-ends/FIPS/libreswan.config /tmp/west-add.conf
west #
 ipsec auto --add test
"test": added unoriented IKEv2 connection (neither left=1.2.3.4 nor right=5.6.7.8 match an interface)
west #
 ipsec status | grep algorithms: # FIPS
"test":   IKE algorithms: AES_GCM_16_256-HMAC_SHA2_512+HMAC_SHA2_256-DH19+MODP2048+DH21+DH20+MODP3072+MODP4096+MODP8192, AES_CBC_256-HMAC_SHA2_512+HMAC_SHA2_256-DH19+MODP2048+DH21+DH20+MODP3072+MODP4096+MODP8192, AES_GCM_16_128-HMAC_SHA2_512+HMAC_SHA2_256-DH19+MODP2048+DH21+DH20+MODP3072+MODP4096+MODP8192, AES_CBC_128-HMAC_SHA2_256-DH19+MODP2048+DH21+DH20+MODP3072+MODP4096+MODP8192
"test":   ESP algorithms: AES_GCM_16_256-NONE, AES_CBC_256-HMAC_SHA2_512_256+HMAC_SHA1_96+HMAC_SHA2_256_128, AES_GCM_16_128-NONE, AES_CBC_128-HMAC_SHA1_96+HMAC_SHA2_256_128
west #
 rm /tmp/west-add.conf
west #
 #
west #
 cp PATH/share/crypto-policies/back-ends/FUTURE/libreswan.config /tmp/west-add.conf
west #
 ipsec auto --add test
"test": added unoriented IKEv2 connection (neither left=1.2.3.4 nor right=5.6.7.8 match an interface)
west #
 ipsec status | grep algorithms: # FUTURE
"test":   IKE algorithms: AES_GCM_16_256-HMAC_SHA2_512+HMAC_SHA2_256-DH19+DH31+DH21+DH20+MODP3072+MODP4096+MODP8192, CHACHA20_POLY1305-HMAC_SHA2_512+HMAC_SHA2_256-DH19+DH31+DH21+DH20+MODP3072+MODP4096+MODP8192, AES_CBC_256-HMAC_SHA2_512+HMAC_SHA2_256-DH19+DH31+DH21+DH20+MODP3072+MODP4096+MODP8192
"test":   ESP algorithms: AES_GCM_16_256-NONE, CHACHA20_POLY1305-NONE, AES_CBC_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128
west #
 rm /tmp/west-add.conf
west #
 #
west #
 cp PATH/share/crypto-policies/back-ends/LEGACY/libreswan.config /tmp/west-add.conf
west #
 ipsec auto --add test
"test": added unoriented IKEv2 connection (neither left=1.2.3.4 nor right=5.6.7.8 match an interface)
west #
 ipsec status | grep algorithms: # LEGACY
"test":   IKE algorithms: AES_GCM_16_256-HMAC_SHA2_512+HMAC_SHA2_256-DH19+MODP2048+DH31+DH21+DH20+MODP3072+MODP4096+MODP8192+MODP1536, CHACHA20_POLY1305-HMAC_SHA2_512+HMAC_SHA2_256-DH19+MODP2048+DH31+DH21+DH20+MODP3072+MODP4096+MODP8192+MODP1536, AES_CBC_256-HMAC_SHA2_512+HMAC_SHA2_256-DH19+MODP2048+DH31+DH21+DH20+MODP3072+MODP4096+MODP8192+MODP1536, AES_GCM_16_128-HMAC_SHA2_512+HMAC_SHA2_256-DH19+MODP2048+DH31+DH21+DH20+MODP3072+MODP4096+MODP8192+MODP1536, AES_CBC_128-HMAC_SHA2_256-DH19+MODP2048+DH31+DH21+DH20+MODP3072+MODP4096+MODP8192+MODP1536
"test":   ESP algorithms: AES_GCM_16_256-NONE, CHACHA20_POLY1305-NONE, AES_CBC_256-HMAC_SHA2_512_256+HMAC_SHA1_96+HMAC_SHA2_256_128, AES_GCM_16_128-NONE, AES_CBC_128-HMAC_SHA1_96+HMAC_SHA2_256_128
west #
 rm /tmp/west-add.conf
west #
