DragonFly BSD
DragonFly bugs List (threaded) for 2005-07
[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]

Possible IPSec issue

From: Dmitri Nikulin <dnikulin@xxxxxxxxxxxxxxx>
Date: Wed, 27 Jul 2005 21:16:14 +1000

I haven't tried IPSec in DragonFly BSD in a few months, but now setkey
doesn't appear to be able to do anything at all. With IPSEC and
IPSEC_ESP in the kernel (-current from yesterday, calls itself
1.3.2-development #0), and this in ipsec.conf (among other things, but
here's where it chokes):

  add esp 0x42 -E rijndael-cbc 0x(the key);

It gives an 'Invalid argument' error which I know to be the lazy 'return
1' condition. Choice of crypto algorithm has no effect.

The same thing works in Linux 2.6.12 with ipsec-tools 0.4 (not much else
does work with Linux IPSec, but this is only transport mode which
appears to be fine).

Is there anything happening in the tree (e.g. system calls or data
structures for ipsec changing) that could possibly cause such an issue?
While this is certainly not urgent for me, for somebody else it might be.

[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]