linux-ipsec: INTEROP: how to do seprate keys for 3DES and MD5?

  I am trying to set up a 3DES-MD5-96 link here at the testing workshop and it's not working.
  It seems that we need separate keys for the encryption (3DES) and for the HMAC (MD5) where the current FreeS/WAN interface (setsa) can ask for only one key (which gets applied in an unknown way to the two functions that want keying material).

  This is a real show stopper for us here, leaving us only des-cbc as a useful transform to interoperate with.   If I am wrong plese point out where so I can go ahead and get some testing done.

		||ugh Daniel
		hugh@toad.com
		System Testing & Project mis-Management
		The Linux FreeS/WAN Project
		
http://www.xs4all.nl/~freeswan