Re: IPSEC stop works after r285336

From: John-Mark Gurney <jmg_at_funkthat.com>
Date: Mon, 3 Aug 2015 17:18:21 -0700
Sydney Meyer wrote this message on Mon, Aug 03, 2015 at 01:15 +0200:
> the revision i built included gnn's patches to setkey already.
> 
> I have tried to setup a tunnel using strongswan with gcm as esp cipher mode, but the connection fails with "algorithm AES_GCM_16 not supported by kernel"..

It looks like GCM isn't compiled by default by the port...  Try the
attached patch to
src/libhydra/plugings/kernel_pfkey/kernel_pfkey_ipsec.c...  it may
require more modifications...

Someone else would be better to work on this...

-- 
  John-Mark Gurney				Voice: +1 415 225 5579

     "All that I will do, has been done, All that I have, has not."

Received on Mon Aug 03 2015 - 22:18:22 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:59 UTC