(usagi-users 01397) Re: Kernel hung if AH enabled

[Kazunori MIYAZAWA <Kazunori.Miyazawa@xxxxxxxxxxxxxxx>]

Hello,

On Tue, 16 Apr 2002 23:53:45 -0400
"D Mat" <ipv6ipsec@xxxxxxxxxxx> wrote:

> I setup IPSec for IPv6 between two nodes and created security policy and 
> association using ipsec-set (used ipsec-static.conf-sample with my ip 
> addresses ).  I have a Java TCPEcho Server program running on one node and 
> Client program running on second node. Everything works fine if I enable 
> only ESP. If I enable AH (adding SA and SP), machine running the TCPEcho 
> client program hung sometime and never able to connect to TCPEcho server. 

I fixed the problem. I could use ssh with AH.
Please try current repository or next snapshot.

> But Ping6 work without any problem. I am  using JDK1.4. I get following 
> message in /var/log/messages "ipsec6_input_check_ah: not found SA for ah". 
> But I can see see SA for ah using pfkey -L command.

Is this messages concerned with TCP? If we get it with all packet, there is
another problem.

By the way, Do we use JDK 1.4 with IPv6 on Linux?

--Kazunori Miyazawa(YOKOGAWA Electric Corporation)