Re: IPsec xfrm resolution
From: Herbert Xu <herbert@gondor.apana.org.au>
Date: 2005-02-20 06:57:20
From: Herbert Xu <herbert@gondor.apana.org.au>
Date: 2005-02-20 06:57:20
On Sat, Feb 19, 2005 at 09:26:02PM +0100, Patrick McHardy wrote:
How about this patch ? It ignores "optional" for missing tunnel mode SAs, symetric to input.
Actually, I've been convinced by your earlier argument :) I now think that IPCOMP users like racoon/openswan should simply not set the optional flag on the sending policy. It only needs to be set on the receiving side. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} [off-list ref] Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt