Notices where this attachment appears
-
I went with algo eventually - thanks _sizeofcat@mastodon.social , and transitioned over to using wireguard instead of ipsec.
I tried to get the algo ipsec implementation working against openWRT 18.06.2 https://openwrt.org/releases/18.06/notes-18.06.2
BUT ...
As far as I could tell the strongswan implementation in OpenWRT has no support of elliptic curves, and the certificates and keys generated by Algo were all ECDSA keys... So I gave up with that.