(usagi-users 02302) Re: IPSec Policy on USAGI IPSec with x509 patch

[Kazunori Miyazawa <kazunori@xxxxxxxxxxxx>]

Hello, 

On Tue, 01 Apr 2003 14:57:44 +0900 (JST)
Ryosuke KUTSUNA "(DEER N' HORSE)" <ryosuke@xxxxxxxxxxxxxxxx> wrote:

> The cherry tree is finely in bloom in Japan. :-)
> 
> From: Noah Meyerhans <noahm@xxxxxxxxxxxxxxxxxxx>
> Subject: (usagi-users 02293) Re: IPSec Policy on USAGI IPSec with x509 patch
> > > if anyone use this patch, tell me how to make policy.
> > > otherwise, use x509 on USAGI IPSec, need to write any codes? 
> > 
> > I haven't quite gotten it to work yet.  For some reason the pluto that
> > I've built chokes on its private key.  I'm still investigating.
> > 
> > Too bad we can't use KAME's racoon and setkey tools with USAGI.
> 
> can be setup IPsec policy if this patch is used ?
> 
>   [PATCH] IPsec Configuration Extension for IPv6
>   http://www.cs.helsinki.fi/linux/linux-kernel/2003-01/0561.html
> 
> but, this patch for linux 2.5.54 ... 
> i feel this patch does not to be use 2.4.x.
> 

This patch is for linux-2.5 serise.
The kernel maintainer applied other patch which was wrote by Ishiguro.
But this is very old topic.

It is not difficult to make USAGI support racoon and setkey, I think.
However we are currently concentrate on IPv6 IPsec of linux-2.5.

--Kazunori Miyazawa (Yokogawa Electric Corporation)