From owner-freebsd-security@FreeBSD.ORG  Fri Oct  5 11:26:16 2007
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id CCB8816A41A
	for <freebsd-security@freebsd.org>;
	Fri,  5 Oct 2007 11:26:16 +0000 (UTC)
	(envelope-from bubblereading@gmail.com)
Received: from wr-out-0506.google.com (wr-out-0506.google.com [64.233.184.235])
	by mx1.freebsd.org (Postfix) with ESMTP id 6759813C461
	for <freebsd-security@freebsd.org>;
	Fri,  5 Oct 2007 11:26:16 +0000 (UTC)
	(envelope-from bubblereading@gmail.com)
Received: by wr-out-0506.google.com with SMTP id 70so337902wra
	for <freebsd-security@freebsd.org>;
	Fri, 05 Oct 2007 04:26:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta;
	h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references;
	bh=2fq+B5Gbxas+F4PAzxDTSZcFksQgnXe24unE/ynDm/8=;
	b=OPxrkLmOs39RskYu6KgKRjUxSkFRHTSBKXXXUoMmAIkXK1Xwi9mOLofx9HUPskWYLlePFriJE9DF+Xd77mZ4DuSRQt8hQZQg5wo2bU4Ea2x68sAOHlDXQRiU7KbsUWU+/hTrdcsvUrilIkTAN0RItrbiqkinalrMIKjGnT9xiTc=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta;
	h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references;
	b=VNS+J7zIAfMZ5Y310AdNGZEvFVWQR9uWIKgwcBdltwuUmKGSvl0VmJl3l3C/J1sIHmVzs+4SvV/NbvmCutSwcVnL4W8b8L29mXhnC7LDppo1OmbT9WesrWqjvcVnc+zls/z7is35DUNYgfeV1OYW8D3idjwZk/hpml/TpMbYCVQ=
Received: by 10.150.148.7 with SMTP id v7mr492625ybd.1191583575601;
	Fri, 05 Oct 2007 04:26:15 -0700 (PDT)
Received: by 10.90.99.9 with HTTP; Fri, 5 Oct 2007 04:26:15 -0700 (PDT)
Message-ID: <a65132710710050426i4665f802re8542e31c8d90800@mail.gmail.com>
Date: Fri, 5 Oct 2007 12:26:15 +0100
From: "Bubble Reading" <bubblereading@gmail.com>
To: "Eygene Ryabinkin" <rea-fbsd@codelabs.ru>
In-Reply-To: <20071005101720.GI971@void.codelabs.ru>
MIME-Version: 1.0
References: <a65132710710050251k46c049a4u73f7364be544c8f7@mail.gmail.com>
	<20071005101720.GI971@void.codelabs.ru>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Cc: freebsd-security@freebsd.org
Subject: Re: FastIPSec and OCF
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 05 Oct 2007 11:26:16 -0000

Hiya,
Can I use Fast-IPSec as a tool to run a crypto command ?

Are there any examples ?

Bubble


On 10/5/07, Eygene Ryabinkin <rea-fbsd@codelabs.ru> wrote:
>
> Good day.
>
> Fri, Oct 05, 2007 at 10:51:56AM +0100, Bubble Reading wrote:
> > Does FASTIPSec in FreeBSD use OCF framework ? Where can I find more
> > documentation ?
>
> OCF: man 9 crypto
> IPSec: man 4 ipsec
> It will give you some pointers, at least on the 7-CURRENT.
>
> <offtopic>
> You can not say 'OCF Framework', because OCF stands for the
> OpenBSD Cryptographic Framework, so you repeat the last word twice.
> </offtopic>
>
> > I wish to run cryptographic algorithms after setting a VPN. What command
> > should I use to run a particular crytographic algorithm (e.g. 3DES etc.)
>
> I think that it depends on the toolset you're using to make VPN.
> Or you want to do it from your own code?  Then you may want to
> have a look at the ports security/racoon2 and security/ipsec-tools.
> --
> Eygene
>



-- 
Regards,
Bubble