[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(usagi-users 00821) Re: problem with pfkey for IPSEC and crypto algorithms



Hello,

At Fri, 21 Sep 2001 16:34:15 -0500,
latten@xxxxxxxxxxxxxx wrote:
> 
> Hi,
> 
> I have installed the September 3 snapshot of the USAGI kit.
> I also configured the IPSEC portion and ran into a problem. I had
> forgotten to define the CRYPTO modules for the kernel so I 
> didn't have any cryto algorithms available to me. I configured
> with "pfkey" as demonstrated in the README.USAGI-IPSEC file.
> My information was added to the SADB although the auth and
> encryption algorithms could not be found. So when it came time 
> to send data, because I had an SA, the data would be sent, it was
> just never encrypted or authenticated since the algorithms didn't exist.
> I thought this might be incorrect behaviour. It gave the illusion 
> that security had occured and all went well, although it hadn't. 
> I did see complaints from kern.log in syslog. 
(snipped)

I merged your patch into our cvs tree.
Thanks.

-mk