Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Guide to the Secure Configuration of Alibaba Cloud Linux 3
System Settings
Installing and Maintaining Software
System and Software Integrity
System Cryptographic Policies
Configure Libreswan to use System Crypto Policy
Configure Libreswan to use System Crypto Policy
An XCCDF Rule
Details
Profiles
Prose
Configure Libreswan to use System Crypto Policy
High Severity
Crypto Policies provide a centralized control over crypto algorithms usage of many packages. Libreswan is supported by system crypto policy, but the Libreswan configuration may be set up to ignore it. To check that Crypto Policies settings are configured correctly, ensure that the
/etc/ipsec.conf
includes the appropriate configuration file. In
/etc/ipsec.conf
, make sure that the following line is not commented out or superseded by later includes:
include /etc/crypto-policies/back-ends/libreswan.config