Re: IPSEC stop works after r285336

From: Sydney Meyer <meyer.sydney_at_googlemail.com>
Date: Sun, 2 Aug 2015 04:03:46 +0200
Hi John-Mark,

i have tried your patches from your ipsecgcm branch. The build completes, boots fine and indeed, dmesg shows "aesni0: <AES-CBC,AES-XTS,AES-GCM,AES-ICM> on motherboard".

I'm going to try out the new cipher modes tomorrow and will get back..

> On 01 Aug 2015, at 22:01, John-Mark Gurney <jmg_at_funkthat.com> wrote:
> 
> Sydney Meyer wrote this message on Wed, Jul 29, 2015 at 22:01 +0200:
>> Same here, fixed running r286015. Thanks a  bunch.
> 
> If you'd like to do some more testing, test the patches in:
> https://github.com/jmgurney/freebsd/tree/ipsecgcm
> 
> These patches get GCM and CTR modes working as tested against NetBSD
> 6.1.5...
> 
> Hope to commit these in the next few days..
> 
> Thanks.
> 
>>> On 29 Jul 2015, at 14:56, Alexandr Krivulya <shuriku_at_shurik.kiev.ua> wrote:
>>> 
>>> 29.07.2015 10:17, John-Mark Gurney ??????????:
>>>> Alexandr Krivulya wrote this message on Thu, Jul 23, 2015 at 10:38 +0300:
>>>> 
>>>> [...]
>>>> 
>>>>> With r285535 all works fine.
>>>> Sydney Meyer wrote this message on Mon, Jul 27, 2015 at 23:49 +0200:
>>>>> I'm having the same problem with IPSec, running -current with r285794.
>>>>> 
>>>>> Don't know if this helps, but "netstat -s -p esp" shows packets dropped; bad ilen.
>>>> It looks like there was an issue w/ that commit...  After looking at
>>>> the code, and working w/ gnn, I have committed r286000 which fixes it
>>>> in my test cases...
> 
> -- 
>  John-Mark Gurney				Voice: +1 415 225 5579
> 
>     "All that I will do, has been done, All that I have, has not."
Received on Sun Aug 02 2015 - 00:03:50 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:59 UTC