netdev - xfrm selector generating IKE

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <BB7E16A14DE689469A181EC770AFBF4D02C5BA6E@exch-one.centrify.com>
Date:	Mon, 23 Feb 2009 17:31:29 -0800
From:	"Paul Moore" <paul.moore@...trify.com>
To:	"Herbert Xu" <herbert@...dor.apana.org.au>
Cc:	<kaber@...sh.net>, <davem@...emloft.net>, <netdev@...r.kernel.org>
Subject: xfrm selector generating IKE

Do you know which version of *swan generates xfrm selectors when it does
an SA ADD or UPDATE. I downloaded openswan 2.6.19 and it does not


-----Original Message-----
From: Herbert Xu [mailto:herbert@...dor.apana.org.au] 
Sent: Thursday, January 29, 2009 10:31 PM
To: Paul Moore
Cc: kaber@...sh.net; davem@...emloft.net; netdev@...r.kernel.org
Subject: Re: port bound SAs

Paul Moore <paul.moore@...trify.com> wrote:
> aha - so with racoon (which uses pfkey) I cannot make this work

Either fix racoon to use xfrm or go with a properly maintained
key manager like one of the *swans.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@...dor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html