diff options
author | Christian Weisgerber <naddy@cvs.openbsd.org> | 2012-07-08 17:54:58 +0000 |
---|---|---|
committer | Christian Weisgerber <naddy@cvs.openbsd.org> | 2012-07-08 17:54:58 +0000 |
commit | cfdab4f6d29b0749325be32609449453ffeeb823 (patch) | |
tree | 8936dda4a6d7c36f09fd7fafadc0168b4973e8bc /regress/sbin/ipsecctl | |
parent | 0f08f11d6fb9ebc66ba30a94fe1f6d748f72a208 (diff) |
AES-CTR, AES-GCM, AES-GMAC are disallowed with manual SAs
Diffstat (limited to 'regress/sbin/ipsecctl')
-rw-r--r-- | regress/sbin/ipsecctl/Makefile | 4 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/ek224 | 1 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/ek256 | 1 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/ek288 | 1 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/sa11.in | 5 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/sa11.ok | 6 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/sa18.in | 4 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/sa18.ok | 6 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/sa21.in | 5 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/sa21.ok | 6 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/sa23.in | 5 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/sa23.ok | 6 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/sa6.in | 4 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/sa6.ok | 6 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/sa9.in | 5 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/sa9.ok | 6 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/safail3.in | 34 | ||||
-rw-r--r-- | regress/sbin/ipsecctl/safail3.ok | 11 |
18 files changed, 50 insertions, 66 deletions
diff --git a/regress/sbin/ipsecctl/Makefile b/regress/sbin/ipsecctl/Makefile index 16b298b16be..8f035dcae0a 100644 --- a/regress/sbin/ipsecctl/Makefile +++ b/regress/sbin/ipsecctl/Makefile @@ -1,4 +1,4 @@ -# $OpenBSD: Makefile,v 1.58 2010/05/10 02:00:49 krw Exp $ +# $OpenBSD: Makefile,v 1.59 2012/07/08 17:54:57 naddy Exp $ # you can update the *.ok files with: make -i | patch # TARGETS @@ -13,7 +13,7 @@ IPSECTESTS+=25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 IPSECTESTS+=51 52 53 54 55 56 57 58 TCPMD5TESTS=1 2 3 SATESTS=1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 -SAFAIL=1 2 +SAFAIL=1 2 3 IPSECFAIL=1 2 3 IKEFAIL=1 3 4 5 6 8 9 11 12 13 14 IKETESTS=1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 diff --git a/regress/sbin/ipsecctl/ek224 b/regress/sbin/ipsecctl/ek224 new file mode 100644 index 00000000000..1e0a2b8cd78 --- /dev/null +++ b/regress/sbin/ipsecctl/ek224 @@ -0,0 +1 @@ +eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee diff --git a/regress/sbin/ipsecctl/ek256 b/regress/sbin/ipsecctl/ek256 new file mode 100644 index 00000000000..aea1d0411b2 --- /dev/null +++ b/regress/sbin/ipsecctl/ek256 @@ -0,0 +1 @@ +eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee diff --git a/regress/sbin/ipsecctl/ek288 b/regress/sbin/ipsecctl/ek288 new file mode 100644 index 00000000000..f1c61bbdabb --- /dev/null +++ b/regress/sbin/ipsecctl/ek288 @@ -0,0 +1 @@ +eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee diff --git a/regress/sbin/ipsecctl/sa11.in b/regress/sbin/ipsecctl/sa11.in index 003f797dc94..26919746485 100644 --- a/regress/sbin/ipsecctl/sa11.in +++ b/regress/sbin/ipsecctl/sa11.in @@ -16,11 +16,6 @@ esp transport from 1.1.1.4 to 2.2.2.2 spi 0x4eadbeef:0xbeef4ead \ auth hmac-sha1 \ authkey file "DIR/ak160:DIR/ak160" \ enckey file "DIR/ek128:DIR/ek128" -esp transport from 1.1.1.5 to 2.2.2.2 spi 0x5eadbeef:0xbeef5ead \ - enc aesctr \ - auth hmac-sha1 \ - authkey file "DIR/ak160:DIR/ak160" \ - enckey file "DIR/ek160:DIR/ek160" esp transport from 1.1.1.6 to 2.2.2.2 spi 0x6eadbeef:0xbeef6ead \ enc blowfish \ auth hmac-sha1 \ diff --git a/regress/sbin/ipsecctl/sa11.ok b/regress/sbin/ipsecctl/sa11.ok index e36a9a64276..f42fbc246f3 100644 --- a/regress/sbin/ipsecctl/sa11.ok +++ b/regress/sbin/ipsecctl/sa11.ok @@ -22,12 +22,6 @@ esp transport from 1.1.1.4 to 2.2.2.2 spi 0x4eadbeef auth hmac-sha1 enc aes \ esp transport from 2.2.2.2 to 1.1.1.4 spi 0xbeef4ead auth hmac-sha1 enc aes \ authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee -esp transport from 1.1.1.5 to 2.2.2.2 spi 0x5eadbeef auth hmac-sha1 enc aesctr \ - authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ - enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee -esp transport from 2.2.2.2 to 1.1.1.5 spi 0xbeef5ead auth hmac-sha1 enc aesctr \ - authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ - enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee esp transport from 1.1.1.6 to 2.2.2.2 spi 0x6eadbeef auth hmac-sha1 enc blowfish \ authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee diff --git a/regress/sbin/ipsecctl/sa18.in b/regress/sbin/ipsecctl/sa18.in index bb46f29d697..44b82e3c18e 100644 --- a/regress/sbin/ipsecctl/sa18.in +++ b/regress/sbin/ipsecctl/sa18.in @@ -13,10 +13,6 @@ esp from 3ffe::4 to 3ffe::10 spi 0x4eadbeef:0xbeef4ead auth hmac-sha1 \ enc aes \ authkey file "DIR/ak160:DIR/ak160" \ enckey file "DIR/ek128:DIR/ek128" -esp from 3ffe::5 to 3ffe::10 spi 0x5eadbeef:0xbeef5ead auth hmac-sha1 \ - enc aesctr \ - authkey file "DIR/ak160:DIR/ak160" \ - enckey file "DIR/ek160:DIR/ek160" esp from 3ffe::6 to 3ffe::10 spi 0x6eadbeef:0xbeef6ead auth hmac-sha1 \ enc blowfish \ authkey file "DIR/ak160:DIR/ak160" \ diff --git a/regress/sbin/ipsecctl/sa18.ok b/regress/sbin/ipsecctl/sa18.ok index fcd33b66376..8c4e7c8ac00 100644 --- a/regress/sbin/ipsecctl/sa18.ok +++ b/regress/sbin/ipsecctl/sa18.ok @@ -22,12 +22,6 @@ esp tunnel from 3ffe::4 to 3ffe::10 spi 0x4eadbeef auth hmac-sha1 enc aes \ esp tunnel from 3ffe::10 to 3ffe::4 spi 0xbeef4ead auth hmac-sha1 enc aes \ authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee -esp tunnel from 3ffe::5 to 3ffe::10 spi 0x5eadbeef auth hmac-sha1 enc aesctr \ - authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ - enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee -esp tunnel from 3ffe::10 to 3ffe::5 spi 0xbeef5ead auth hmac-sha1 enc aesctr \ - authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ - enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee esp tunnel from 3ffe::6 to 3ffe::10 spi 0x6eadbeef auth hmac-sha1 enc blowfish \ authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee diff --git a/regress/sbin/ipsecctl/sa21.in b/regress/sbin/ipsecctl/sa21.in index 63c8b64f6ad..4580738beb6 100644 --- a/regress/sbin/ipsecctl/sa21.in +++ b/regress/sbin/ipsecctl/sa21.in @@ -16,11 +16,6 @@ esp from 3ffe::4 to 3ffe::10 spi 0x4eadbeef:0xbeef4ead \ auth hmac-sha1 \ authkey file "DIR/ak160:DIR/ak160" \ enckey file "DIR/ek128:DIR/ek128" -esp from 3ffe::5 to 3ffe::10 spi 0x5eadbeef:0xbeef5ead \ - enc aesctr \ - auth hmac-sha1 \ - authkey file "DIR/ak160:DIR/ak160" \ - enckey file "DIR/ek160:DIR/ek160" esp from 3ffe::6 to 3ffe::10 spi 0x6eadbeef:0xbeef6ead \ enc blowfish \ auth hmac-sha1 \ diff --git a/regress/sbin/ipsecctl/sa21.ok b/regress/sbin/ipsecctl/sa21.ok index fcd33b66376..8c4e7c8ac00 100644 --- a/regress/sbin/ipsecctl/sa21.ok +++ b/regress/sbin/ipsecctl/sa21.ok @@ -22,12 +22,6 @@ esp tunnel from 3ffe::4 to 3ffe::10 spi 0x4eadbeef auth hmac-sha1 enc aes \ esp tunnel from 3ffe::10 to 3ffe::4 spi 0xbeef4ead auth hmac-sha1 enc aes \ authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee -esp tunnel from 3ffe::5 to 3ffe::10 spi 0x5eadbeef auth hmac-sha1 enc aesctr \ - authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ - enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee -esp tunnel from 3ffe::10 to 3ffe::5 spi 0xbeef5ead auth hmac-sha1 enc aesctr \ - authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ - enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee esp tunnel from 3ffe::6 to 3ffe::10 spi 0x6eadbeef auth hmac-sha1 enc blowfish \ authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee diff --git a/regress/sbin/ipsecctl/sa23.in b/regress/sbin/ipsecctl/sa23.in index 528d88cb488..80655d6f214 100644 --- a/regress/sbin/ipsecctl/sa23.in +++ b/regress/sbin/ipsecctl/sa23.in @@ -16,11 +16,6 @@ esp transport from 3ffe::4 to 3ffe::10 spi 0x4eadbeef:0xbeef4ead \ auth hmac-sha1 \ authkey file "DIR/ak160:DIR/ak160" \ enckey file "DIR/ek128:DIR/ek128" -esp transport from 3ffe::5 to 3ffe::10 spi 0x5eadbeef:0xbeef5ead \ - enc aesctr \ - auth hmac-sha1 \ - authkey file "DIR/ak160:DIR/ak160" \ - enckey file "DIR/ek160:DIR/ek160" esp transport from 3ffe::6 to 3ffe::10 spi 0x6eadbeef:0xbeef6ead \ enc blowfish \ auth hmac-sha1 \ diff --git a/regress/sbin/ipsecctl/sa23.ok b/regress/sbin/ipsecctl/sa23.ok index ad2832d7730..7aacf9c7742 100644 --- a/regress/sbin/ipsecctl/sa23.ok +++ b/regress/sbin/ipsecctl/sa23.ok @@ -22,12 +22,6 @@ esp transport from 3ffe::4 to 3ffe::10 spi 0x4eadbeef auth hmac-sha1 enc aes \ esp transport from 3ffe::10 to 3ffe::4 spi 0xbeef4ead auth hmac-sha1 enc aes \ authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee -esp transport from 3ffe::5 to 3ffe::10 spi 0x5eadbeef auth hmac-sha1 enc aesctr \ - authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ - enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee -esp transport from 3ffe::10 to 3ffe::5 spi 0xbeef5ead auth hmac-sha1 enc aesctr \ - authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ - enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee esp transport from 3ffe::6 to 3ffe::10 spi 0x6eadbeef auth hmac-sha1 enc blowfish \ authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee diff --git a/regress/sbin/ipsecctl/sa6.in b/regress/sbin/ipsecctl/sa6.in index aa9b4d21b02..919f091063d 100644 --- a/regress/sbin/ipsecctl/sa6.in +++ b/regress/sbin/ipsecctl/sa6.in @@ -13,10 +13,6 @@ esp from 1.1.1.4 to 2.2.2.2 spi 0x4eadbeef:0xbeef4ead auth hmac-sha1 \ enc aes \ authkey file "DIR/ak160:DIR/ak160" \ enckey file "DIR/ek128:DIR/ek128" -esp from 1.1.1.5 to 2.2.2.2 spi 0x5eadbeef:0xbeef5ead auth hmac-sha1 \ - enc aesctr \ - authkey file "DIR/ak160:DIR/ak160" \ - enckey file "DIR/ek160:DIR/ek160" esp from 1.1.1.6 to 2.2.2.2 spi 0x6eadbeef:0xbeef6ead auth hmac-sha1 \ enc blowfish \ authkey file "DIR/ak160:DIR/ak160" \ diff --git a/regress/sbin/ipsecctl/sa6.ok b/regress/sbin/ipsecctl/sa6.ok index 51a53803e97..d919433b8f2 100644 --- a/regress/sbin/ipsecctl/sa6.ok +++ b/regress/sbin/ipsecctl/sa6.ok @@ -22,12 +22,6 @@ esp tunnel from 1.1.1.4 to 2.2.2.2 spi 0x4eadbeef auth hmac-sha1 enc aes \ esp tunnel from 2.2.2.2 to 1.1.1.4 spi 0xbeef4ead auth hmac-sha1 enc aes \ authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee -esp tunnel from 1.1.1.5 to 2.2.2.2 spi 0x5eadbeef auth hmac-sha1 enc aesctr \ - authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ - enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee -esp tunnel from 2.2.2.2 to 1.1.1.5 spi 0xbeef5ead auth hmac-sha1 enc aesctr \ - authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ - enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee esp tunnel from 1.1.1.6 to 2.2.2.2 spi 0x6eadbeef auth hmac-sha1 enc blowfish \ authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee diff --git a/regress/sbin/ipsecctl/sa9.in b/regress/sbin/ipsecctl/sa9.in index cbe9c59eb0d..53ebc2be163 100644 --- a/regress/sbin/ipsecctl/sa9.in +++ b/regress/sbin/ipsecctl/sa9.in @@ -16,11 +16,6 @@ esp from 1.1.1.4 to 2.2.2.2 spi 0x4eadbeef:0xbeef4ead \ auth hmac-sha1 \ authkey file "DIR/ak160:DIR/ak160" \ enckey file "DIR/ek128:DIR/ek128" -esp from 1.1.1.5 to 2.2.2.2 spi 0x5eadbeef:0xbeef5ead \ - enc aesctr \ - auth hmac-sha1 \ - authkey file "DIR/ak160:DIR/ak160" \ - enckey file "DIR/ek160:DIR/ek160" esp from 1.1.1.6 to 2.2.2.2 spi 0x6eadbeef:0xbeef6ead \ enc blowfish \ auth hmac-sha1 \ diff --git a/regress/sbin/ipsecctl/sa9.ok b/regress/sbin/ipsecctl/sa9.ok index 99f4ae10c6a..40ca0103a7b 100644 --- a/regress/sbin/ipsecctl/sa9.ok +++ b/regress/sbin/ipsecctl/sa9.ok @@ -22,12 +22,6 @@ esp tunnel from 1.1.1.4 to 2.2.2.2 spi 0x4eadbeef auth hmac-sha1 enc aes \ esp tunnel from 2.2.2.2 to 1.1.1.4 spi 0xbeef4ead auth hmac-sha1 enc aes \ authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee -esp tunnel from 1.1.1.5 to 2.2.2.2 spi 0x5eadbeef auth hmac-sha1 enc aesctr \ - authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ - enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee -esp tunnel from 2.2.2.2 to 1.1.1.5 spi 0xbeef5ead auth hmac-sha1 enc aesctr \ - authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ - enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee esp tunnel from 1.1.1.6 to 2.2.2.2 spi 0x6eadbeef auth hmac-sha1 enc blowfish \ authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee diff --git a/regress/sbin/ipsecctl/safail3.in b/regress/sbin/ipsecctl/safail3.in new file mode 100644 index 00000000000..cdb19f2b27f --- /dev/null +++ b/regress/sbin/ipsecctl/safail3.in @@ -0,0 +1,34 @@ +esp from 1.1.1.1 to 2.2.2.2 spi 0x1eadbeef:0xbeef1ead \ + enc aesctr \ + authkey file "DIR/ak256:DIR/ak256" \ + enckey file "DIR/ek160:DIR/ek160" +esp from 1.1.1.2 to 2.2.2.2 spi 0x2eadbeef:0xbeef2ead \ + enc aes-128-ctr \ + authkey file "DIR/ak256:DIR/ak256" \ + enckey file "DIR/ek160:DIR/ek160" +esp from 1.1.1.3 to 2.2.2.2 spi 0x3eadbeef:0xbeef3ead \ + enc aes-192-ctr \ + authkey file "DIR/ak256:DIR/ak256" \ + enckey file "DIR/ek224:DIR/ek224" +esp from 1.1.1.4 to 2.2.2.2 spi 0x4eadbeef:0xbeef4ead \ + enc aes-256-ctr \ + authkey file "DIR/ak256:DIR/ak256" \ + enckey file "DIR/ek288:DIR/ek288" +esp from 1.1.1.5 to 2.2.2.2 spi 0x5eadbeef:0xbeef5ead \ + enc aes-128-gcm \ + enckey file "DIR/ek160:DIR/ek160" +esp from 1.1.1.6 to 2.2.2.2 spi 0x6eadbeef:0xbeef6ead \ + enc aes-192-gcm \ + enckey file "DIR/ek224:DIR/ek224" +esp from 1.1.1.7 to 2.2.2.2 spi 0x7eadbeef:0xbeef7ead \ + enc aes-256-gcm \ + enckey file "DIR/ek288:DIR/ek288" +esp from 1.1.1.8 to 2.2.2.2 spi 0x8eadbeef:0xbeef8ead \ + enc aes-128-gmac \ + enckey file "DIR/ek160:DIR/ek160" +esp from 1.1.1.9 to 2.2.2.2 spi 0x9eadbeef:0xbeef9ead \ + enc aes-192-gmac \ + enckey file "DIR/ek224:DIR/ek224" +esp from 1.1.1.10 to 2.2.2.2 spi 0xaeadbeef:0xbeefaead \ + enc aes-256-gmac \ + enckey file "DIR/ek288:DIR/ek288" diff --git a/regress/sbin/ipsecctl/safail3.ok b/regress/sbin/ipsecctl/safail3.ok new file mode 100644 index 00000000000..09aff4e95b5 --- /dev/null +++ b/regress/sbin/ipsecctl/safail3.ok @@ -0,0 +1,11 @@ +stdin: 4: aesctr is disallowed with static keys +stdin: 8: aes-128-ctr is disallowed with static keys +stdin: 12: aes-192-ctr is disallowed with static keys +stdin: 16: aes-256-ctr is disallowed with static keys +stdin: 19: aes-128-gcm is disallowed with static keys +stdin: 22: aes-192-gcm is disallowed with static keys +stdin: 25: aes-256-gcm is disallowed with static keys +stdin: 28: aes-128-gmac is disallowed with static keys +stdin: 31: aes-192-gmac is disallowed with static keys +stdin: 34: aes-256-gmac is disallowed with static keys +ipsecctl: Syntax error in config file: ipsec rules not loaded |