I have a remote strongswan connection that uses: ike=chacha20poly1305-prfsha256-ntru256! esp=chacha20poly1305-ntru256! Plugin list: https://wiki.strongswan.org/projects/strongswan/wiki/Pluginlist chapoly plugin (was introduced in: strongswan-5.3.3 https://wiki.strongswan.org/versions/58#Version-533 Fortunately, the ntru plugin already exists in current strongswan-5.5.3 ebuild. I am currently using a modified ebuild that simply adds: STRONGSWAN_PLUGINS_OPT="blowfish ccm chapoly ctr gcm ha ipseckey ntru padlock rdrand unbound whitelist" I'm running the modified ebuild with chapoly+ntru enabled, and it is successfully connecting to the remote now. As an aside, when using 'ntru', remember to update '/etc/strongswan.d/charon.conf' and enable: 'send_vendor_id = yes' otherwise you'll receive a 'received proposals inacceptable' error. P.S. adding the 'newhope' plugin would be nice too, it is also available in 5.5.3. :) STRONGSWAN_PLUGINS_OPT="blowfish ccm chapoly ctr gcm ha ipseckey newhope ntru padlock rdrand unbound whitelist"
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=04bad22fe2e92f90cf9800043c1d68f80679b3a9 commit 04bad22fe2e92f90cf9800043c1d68f80679b3a9 Author: Thomas Deutschmann <whissi@gentoo.org> AuthorDate: 2018-09-02 18:56:05 +0000 Commit: Thomas Deutschmann <whissi@gentoo.org> CommitDate: 2018-09-02 19:23:50 +0000 net-vpn/strongswan: bump to v5.6.3 - EAPI bumped to EAPI=7. - Enable "eap-ttls" when USE=eap is set. [Bug 548212] - USE=strongswan_plugins_forecast added. [Bug 582444] - USE=systemd added to allow building of charon-systemd. [Bug 631748] - USE=strongswan_plugins_chapoly and USE=strongswan_plugins_newhope added. [Bug 643978] Closes: https://bugs.gentoo.org/548212 Closes: https://bugs.gentoo.org/582444 Closes: https://bugs.gentoo.org/631748 Closes: https://bugs.gentoo.org/643978 Package-Manager: Portage-2.3.48, Repoman-2.3.10 net-vpn/strongswan/Manifest | 1 + net-vpn/strongswan/metadata.xml | 5 + net-vpn/strongswan/strongswan-5.6.3.ebuild | 303 +++++++++++++++++++++++++++++ 3 files changed, 309 insertions(+)
