AFAIK strongswan passes it to the underlying crypto library unmodified and lets the library handle it. They support multiple libraries.
Regards Lloyd hshoexer wrote: > As RFC4754 section 7 [1] defines these boundaries, I prefer to stick > with them. Does strongswan give a hint, why they relaxed this? > > [1] https://www.rfc-editor.org/info/rfc4754/#section-7
