'\" t
.\"     Title: IPSEC-ALGPARSE
.\"    Author: [see the "AUTHOR" section]
.\" Generator: DocBook XSL Stylesheets v1.79.2 <http://docbook.sf.net/>
.\"      Date: 10/23/2026
.\"    Manual: Executable programs
.\"    Source: Libreswan v5.4.1-HEAD
.\"  Language: English
.\"
.TH "IPSEC\-ALGPARSE" "8" "10/23/2026" "Libreswan v5.4.1-HEAD" "Executable programs"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.\" http://bugs.debian.org/507673
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------


  

  .SH "NAME"
ipsec-algparse \- utility for verifying IKE and IPsec cryptographic proposal syntax


  .SH "SYNOPSIS"

    .HP \w'\fBipsec\ algparse\fR\ 'u

      \fBipsec algparse\fR
       [\-\-verbose]
       [\-\-debug]
       [\-\-nssdir\ \fIdirectory\fR]  [\-\-nsspw\ \fIpassword\fR]  [\-\-seeddev\ \fIdevice\fR]  [\-\-seedbits\ \fIbits\fR]
      
.br

      [
	 | \-\-ikev1
	 | \-\-ikev2
	 | \-\-verbose
	 | \-\-pfs\ {\ |\ yes\ |\ no\ }
	 | \-\-fips\ {\ |\ yes\ |\ no\ }
	 | \-\-ignore
	 | \-\-impair
      ]
      
.br

      {
	 | \-\-tp
	 | \-\-ta
	 | ike=\fIproposals\fR
	 | esp=\fIproposals\fR
	 | ah=\fIproposals\fR
	 | \fIproposals\fR
      }
    

  

  .SH "DESCRIPTION"

    

    .PP
\fBipsec algparse\fR
is a utility that parses and expands and Internet Key Exchange cryptographic proposals using the same syntax as used in the file
ipsec\&.conf
(see the description of
\fBike=\fR
and
\fBesp=\fR
in
ipsec\&.conf
(see
\fBipsec.conf\fR(5)
for details)\&. In addition,
\fBipsec algparse\fR
can be used to run the proposal parser or the cryptographic algorithm testsuites\&.


    .PP
The following options control what
\fBipsec algparse\fR
will parse:


    


      .PP
\fBike=\fR\fB[\fIproposals\fR]\fR
.br
\fBesp=\fR\fB[\fIproposals\fR]\fR
.br
\fBah=\fR\fB[\fIproposals\fR]\fR
.RS 4

	
	
	
	
	  Parse the
\fIproposals\fR
using the IKE, ESP, or AH proposal parser\&. When
\fIproposals\fR
is omitted, display the default IKE, ESP, or AH proposals\&.

	
      .RE

      .PP
\fBproposal\fR
.RS 4

	
	
	  Try to parse the proposal using all three of the IKE, ESP, and AH proposal parsers\&.

	
      .RE

      .PP
\fB\-tp\fR
.RS 4

	
	
	  run the proposal testsuite

	
      .RE

      .PP
\fB\-ta\fR
.RS 4

	
	
	  run the algorithm testsuite

	
      .RE

    

    .PP
The following options alter the parser behaviour:


    


      .PP
\fB\-v1\fR
.br
\fB\-v2\fR
.RS 4

	
	
	
	  Parse the
\fIproposals\fR
using either the IKEv1 or IKEv2 proposal syntax\&.
.sp

	  The default is IKEv2\&.

	
      .RE

      .PP
\fB\-pfs=yes|no\fR
.RS 4

	
	
	  Specify PFS (Perfect Forward Privicy)\&. When
\fByes\fR
Diffi\-Helman algorithms will be included in the proposal\&.
.sp

	  The default is
\fB\-\-pfs=no\fR\&.

	
      .RE

      .PP
\fB\-fips=yes|no\fR
.RS 4

	
	
	  Force NSS into FIPS mode\&.
.sp

	  The default is determined by the system environment\&.

	
      .RE

      .PP
\fB\-p1\fR
.br
\fB\-p2\fR
.RS 4

	
	
	
	  Specify the parser to use\&.
.sp

	  By default, IKEv1 uses the simple (p1) parser, and IKEv2 uses the more complex (p2) parser\&.

	
      .RE

      .PP
\fB\-nsspw\fR
.RS 4

	
	
	  Specify the NSS database password\&.

	
      .RE

      .PP
\fB\-impair\fR
.RS 4

	
	
	  Impair the parser, disabling all algorithm checks\&.

	
      .RE

      .PP
\fB\-ignore\fR
.RS 4

	
	
	  Ignore parser errors\&.

	
      .RE

      .PP
\fB\-v\fR
.br
\fB\-verbose\fR
.RS 4

	
	
	
	  Be more verbose when invoking proposal parser\&.

	
      .RE

      .PP
\fB\-d\fR
.br
\fB\-debug\fR
.RS 4

	
	
	
	  Enable full debug\-logging when invoking the proposal parser\&.

	
      .RE

    

  

  .SH "HISTORY"

    
    .PP
Written for the
Libreswan
project by
Andrew Cagney\&.

  

  .SH "AUTHOR"

    
    
    Andrew Cagney, Tuomo Soini