east:~# export PLUTO="ipsec pluto" east:~# export WHACK="ipsec whack" east:~# if [ -d $MYBOX/testing ]; then TESTING=$MYBOX/testing; else TESTING=/testing;fi east:~# PATH=${TESTING}/pluto/bin:$PATH export PATH east:~# ${TESTING}/pluto/bin/ifconfigs up east:~# cd /tmp east:/tmp# mkdir log east:/tmp# ln -f -s ${TESTING}/pluto/log.ref . east:/tmp# ln -f -s ${TESTING}/pluto/ipsec.secrets . east:/tmp# ln -f -s ${TESTING}/pluto/ipsec.d/west . east:/tmp# ln -f -s ${TESTING}/pluto/ipsec.d/east . east:/tmp# . doauto --diff isakmp-psk isakmp-rsa isakmp-rsa-case isakmp-psk: isakmp-rsa: isakmp-rsa-case: east:/tmp# . doauto --diff isakmp-rsa-dot ipsec-psk ipsec-rsa ipsec-rsa-time-neg isakmp-rsa-dot: ipsec-psk: ipsec-rsa: ipsec-rsa-time-neg: east:/tmp# . doauto --diff ipsec-rsa-time-trunc ipsec-rsa-time-neg-dontrekey ipsec-rsa-time-trunc: ipsec-rsa-time-neg-dontrekey: east:/tmp# . doauto --diff ipsec-rsa-delete ipsec-rsa-c ipsec-rsa-co ipsec-rsa-delete: ipsec-rsa-c: ipsec-rsa-co: --- log.ref/ipsec-rsa-co/wi-log Sat Nov 26 19:42:51 2005 +++ log/ipsec-rsa-co/wi-log Sat Nov 26 20:59:33 2005 @@ -44,10 +44,16 @@ 000 debug raw+crypt+parsing+emitting+control+lifecycle+klips+dns+oppo+controlmore+pfkey+nattraversal+x509+private 000 000 +000 algorithm IKE encrypt: id=3, name=OAKLEY_BLOWFISH_CBC, blocksize=8, keydeflen=128 000 algorithm IKE encrypt: id=5, name=OAKLEY_3DES_CBC, blocksize=8, keydeflen=192 000 algorithm IKE encrypt: id=7, name=OAKLEY_AES_CBC, blocksize=16, keydeflen=128 +000 algorithm IKE encrypt: id=65004, name=OAKLEY_SERPENT_CBC, blocksize=16, keydeflen=128 +000 algorithm IKE encrypt: id=65005, name=OAKLEY_TWOFISH_CBC, blocksize=16, keydeflen=128 +000 algorithm IKE encrypt: id=65289, name=OAKLEY_TWOFISH_CBC_SSH, blocksize=16, keydeflen=128 000 algorithm IKE hash: id=1, name=OAKLEY_MD5, hashsize=16 000 algorithm IKE hash: id=2, name=OAKLEY_SHA1, hashsize=20 +000 algorithm IKE hash: id=4, name=OAKLEY_SHA2_256, hashsize=32 +000 algorithm IKE hash: id=6, name=OAKLEY_SHA2_512, hashsize=64 000 algorithm IKE dh group: id=2, name=OAKLEY_GROUP_MODP1024, bits=1024 000 algorithm IKE dh group: id=5, name=OAKLEY_GROUP_MODP1536, bits=1536 000 algorithm IKE dh group: id=14, name=OAKLEY_GROUP_MODP2048, bits=2048 diff -w -u failures: ipsec-rsa-co 1 east:/tmp# . doauto --diff ipsec-psk-rw ipsec-psk-id-rw ipsec-rsa-rw ipsec-psk-rw: ipsec-psk-id-rw: ipsec-rsa-rw: