Detections
Analytics

1.306 OL09-00-002404

Information

OL 9 IP tunnels must use 140-3 approved cryptographic algorithms.

GROUP ID: V-271743
RULE ID: SV-271743r1184204

Overriding the system crypto policy makes the behavior of the Libreswan service violate expectations and makes system configuration more fragmented.

Solution

Configure IPsec to use the systemwide cryptographic policy.

Add the following line to "/etc/ipsec.conf":

include /etc/crypto-policies/back-ends/libreswan.config

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-17(2), CCI|CCI-000068, Rule-ID|SV-271743r1184204_rule, STIG-ID|OL09-00-002404, Vuln-ID|V-271743

Plugin: Unix

Control ID: b2a20edb171eca6f68f0c1de6961415246db6f4f2eda78e6816c6af5e502e4aa