Stack Overflow
Stack Overflow

Questions tagged [ipsec]

Internet Protocol Security (IPsec) is a protocol suite for securing IP communications by authenticating and/or encrypting each IP packet of a communication session.

282 questions
2
votes
0 answers

Create L2TP/IPSec client android

I need to create a L2TP/IPSec client application android. I read the android VPN documentation. It states some legacy API for that. But I could not find such one. Also provided example app for VPN client does not work since it was built for a very…
Lakindu Akash
  • 964
  • 1
  • 11
  • 28
2
votes
0 answers

Is there an IPSec stack which I can use with lwIP

I am developing an embedded device based on OpenRTOS and lwIP (network stack). I would like to add IPSec support to the device. Any known IPSec stacks (open source or commercial) which works with lwIP?
Kimel
  • 199
  • 1
  • 7
2
votes
2 answers

IPSec vs OpenSSL vs PGP

IPSec is employed at the IP level, SSL at the transport level and PGP at the application level. In some lecture not it says: IPSEC: Most general solution but least flexible SSL: Still very general and some flexibility PGP: Least general but very…
Andrew
  • 77
  • 2
  • 3
2
votes
1 answer

Does xfrm_user_rcv_msg() need modifications to support 32-bit IPsec on Ubuntu 16.04 (LTS) installed in a X86_64 VM?

I am in the process of migrating an IPsec application from VxWorks to Linux. And I am pretty new to Linux. The component that uses IPsec is a 32-bit application. However, the entire product runs in a 64-bit environment. We are using Ubuntu 16.04…
user50392
  • 21
  • 2
2
votes
1 answer

strongSwan: /var/run/charon.vici file does not exist issue

I have a Ubuntu Server 16.04 VM in VirtualBox, downloaded and installed strongSwan on it using commands below: sudo apt-get install gcc make libgmp3-dev build-essential wget http://download.strongswan.org/strongswan-5.6.0.tar.bz2 tar xjvf…
Igor Nehoroshev
  • 308
  • 1
  • 3
  • 13
2
votes
0 answers

Data integrity in asyncronous CryptoApi in Linux

I work on implementation of driver for Linuc CryptoApi. Encryption/decryption will be performed in hardware and I want to use asynchronous operation of CryptoApi, which perfectly suitable for this purpose. Main purpose of driver is using with…
yankovic
  • 85
  • 1
  • 7
2
votes
0 answers

Open vSwitch GRE over IPSec

I am trying to estalbish an GRE over IPSec tunnel between my hosts. Regular IPSec works: Host 1: ovs-vsctl add-br mybr0 ifconfig mybr0 10.0.0.1/24 up ovs-vsctl add-port mybr0 gre0 -- set interface gre0 type=gre options:remote_ip=172.16.0.206 Host…
Mustafa
  • 10,013
  • 10
  • 70
  • 116
2
votes
2 answers

Difference between 2 vs "\2"

While trying to implement the IKE session key generation algorithms I came across the following code snippets for the following algorithm implementation Algorithm for generating a certain session key SKEYID_e = HMAC (SKEYID, SKEYID_a || gxy || CKY-I…
cmidi
  • 1,880
  • 3
  • 20
  • 35
2
votes
1 answer

Does Linux IPSEC support AH Transport with AES GMAC?

Could not figure out if linux kernel 4.4 supports IPSEC AH transport with AES GMAC. Trying various combination of "ip xfrm state" command but no luck. Is this implemented ? Try 1 sudo ip xfrm state add src 192.168.0.1 dst 192.168.0.2 proto ah spi…
Sanjeev Singh
  • 141
  • 1
  • 10
2
votes
0 answers

Why ping (ICMP) generates ESP traffic?

I'm reading this article on wikipedia about protocols (OSI model) [1] It says that ICMP(aka ping) and IPsec are at Layer 3(Network Layer). And ESP is at Layer 4(Transport Layer). When I use strongSwan [2] on two machines and I have an established…
Codrut Cristian Grosu
  • 61
  • 1
  • 4
2
votes
1 answer

Enable AES and SHA256 algorithms in IPSEC on Windows

I'm setting up IPSec on Windows 2012 R2 using the wizards found at gpedit.msc (Local Computer Policy, Security Settings, IP Security Policies...). When modifying the security method and clicking on custom, I am expecting to see more algorithms than…
Charles
  • 21
  • 1
  • 5
2
votes
0 answers

Connecting to VPN programmatically with PPTP in iOS

I want to connect through vpn using pptp connection programmatically. Is this Possible? So far I have find http://ramezanpour.net/post/2014/08/03/configure-and-manage-vpn-connections-programmatically-in-ios-8/ but here only IPSec and IKEv2 protocol…
Pavel
  • 64
  • 4
2
votes
1 answer

Offline encryption of IP packets using ESP

I understand that we can use wireshark or tshark to decryptm, in offline mode, IPSec packets that are encrypted using ESP. Is it possible to do the reverse using tshark or another userspace (vs. kernel-space) application? In other words, is there…
Salem Derisavi
  • 137
  • 1
  • 10
2
votes
0 answers

How can connect to L2TP/IPSEC VPN Server?

I have a vpn account from a L2TP/IPSEC VPN Server and use four attributes to connect it from Android or Windows devices: IP Adress, User Name, User Password and PreShared Key. I can connect with these details successfully manually. I also want to…
Faruk KAHRAMAN
  • 69
  • 1
  • 2
  • 11
2
votes
1 answer

IKEv2 Rekeying of IKE_SA using CREATE_CHILD_SA message

I have a Confusion regarding rekeying Procedure of IKE_SA in IKEv2. MY confusion is when rekeying of IKE_SA is done whether its repective Keys of CHILD_SAs ie. ESP or AH SAs would be change or not. As per rfc 7296, in rekeying procedure of IKE_SA…
user2940110
  • 69
  • 2
  • 7
1 2 3
…
18 19