[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(usagi-users 02418) Re: IPsec 2.5.70-bk9 and FreeS/WAN 1.99 with algopatches 0.8.1rc2



Hello Peter,

Could you tell me what testbed are you employing for this tests?, i.e. are you using IPv6, ipv4, both?, automatic or manual keying?,...

Thank you very much.

Best regards,

Javi Garzon

> -----Mensaje original-----
> De: Dr. Peter Bieringer [mailto:pb@xxxxxxxxxxxx]
> Enviado el: jueves, 05 de junio de 2003 16:20
> Para: netdev@xxxxxxxxxxx
> CC: usagi-users@xxxxxxxxxxxxxx
> Asunto: (usagi-users 02416) Re: IPsec 2.5.70-bk9 and 
> FreeS/WAN 1.99 with
> algopatches 0.8.1rc2
> 
> 
> Ohoh, sorry for confusions, my racoon here was a little bit buggy...
> 
> ...be warned, not using RHL's ipsec-tools from 
> rawhide...looks like the 
> racoon isn't compiled in a proper environment :-( it doesn't 
> support DES 
> and causes trouble on 3DES *grmml*).
> 
> The reported 3DES problem was solved now by using a fresh 
> compiled one.
> 
> But the AES one still occurs.
> 
> > FreeS/WAN:
> > 112 "freeswan-racoon-tunnel" #14: STATE_QUICK_I1: initiate
> > 003 "freeswan-racoon-tunnel" #14: ESP transform ESP_AES 
> passed key_len=32
> > > 16 032 "freeswan-racoon-tunnel" #14: STATE_QUICK_I1: 
> internal error
> 
> Or on 192 bits:
> 
> 112 "freeswan-racoon-tunnel" #15: STATE_QUICK_I1: initiate
> 003 "freeswan-racoon-tunnel" #15: ESP transform ESP_AES 
> passed key_len=24 > 
> 16
> 032 "freeswan-racoon-tunnel" #15: STATE_QUICK_I1: internal error
> 
> Strange, looks like racoon reports always AES key length 16*8, but in 
> raccoon.conf was "aes 192" or "aes 256" specified.
> 
> 
> 	Peter, partially happy now
> -- 
> Dr. Peter Bieringer                     http://www.bieringer.de/pb/
> GPG/PGP Key 0x958F422D               mailto: pb at bieringer dot de
> Deep Space 6 Co-Founder and Core Member  http://www.deepspace6.net/
> 
> 
>