--- west.console.txt 2019-08-24 18:12:56.182677133 +0000 +++ OUTPUT/west.console.txt 2019-08-26 13:11:38.447373667 +0000 @@ -14,7 +14,6 @@ # confirm clear text does not get through west # ../../pluto/bin/ping-once.sh --down -I 192.0.1.254 192.0.2.254 -[ 00.00] IN=eth1 OUT= MAC=12:00:00:64:64:45:12:00:00:64:64:23:08:00 SRC=192.0.2.254 DST=192.0.1.254 LEN=XXXX TOS=0x00 PREC=0x00 TTL=64 ID=XXXXX PROTO=ICMP TYPE=0 CODE=0 ID=XXXX SEQ=1 down west # ipsec start @@ -32,10 +31,14 @@ ! ipsec auto --add esp=null-none 036 Failed to add connection "esp=null-none", esp="null-none" is invalid: non-AEAD ESP encryption algorithm 'null' cannot have 'none' as the integrity algorithm west # + +west # # get esp=null-none past the parser west # ipsec whack --impair allow-null-none west # + +west # # include INTEG=NONE in the proposal west # ipsec whack --impair no-ikev2-exclude-integ-none,ikev2-include-integ-none @@ -59,6 +62,8 @@ 002 "esp=null-none" #1: deleting state (STATE_PARENT_I3) and sending notification 002 "esp=null-none": terminating SAs using this connection west # + +west # # exclude INTEG=NONE in the proposal west # ipsec whack --impair no-ikev2-include-integ-none,ikev2-exclude-integ-none @@ -82,6 +87,8 @@ 002 "esp=null-none" #3: deleting state (STATE_PARENT_I3) and sending notification 002 "esp=null-none": terminating SAs using this connection west # + +west # echo done done west #