22
submitted 5 days ago by miz@hexbear.net to c/technology@hexbear.net

09[IKE] DH group ECP_256 unacceptable, requesting ECP_256

internet-delenda-est

you are viewing a single comment's thread
view the rest of the comments
[-] miz@hexbear.net 2 points 5 days ago* (last edited 5 days ago)

well, the worst part is I had a functioning IPsec site-to-site setup as well as road warrior configuration, running on OpenWRT 19. but now after upgrading to OpenWRT 24, I can't get it to work again. they redid the whole config system and moved away from ipsec to swanctl and the user-layer part of the IPSec subsystem in OpenWRT appears to have been barely maintained through the upgrade path

[-] stupid_asshole69@hexbear.net 3 points 5 days ago

Yeah the last five years have been very bad for open source projects. If you can justify the move to pfsense it’s very worth it to get away from projects that are maybe getting too far out over their skis.

I’m in the process of doing this with a handful of tomato derivative running old edge devices that never got replaced.

this post was submitted on 30 May 2025
22 points (95.8% liked)

technology

23800 readers
167 users here now

On the road to fully automated luxury gay space communism.

Spreading Linux propaganda since 2020

Rules:

founded 4 years ago
MODERATORS