xfrm selector generating IKE
From: Paul Moore <hidden>
Date: 2009-02-24 01:31:34
Do you know which version of *swan generates xfrm selectors when it does an SA ADD or UPDATE. I downloaded openswan 2.6.19 and it does not -----Original Message----- From: Herbert Xu [mailto:herbert@gondor.apana.org.au] Sent: Thursday, January 29, 2009 10:31 PM To: Paul Moore Cc: kaber@trash.net; davem@davemloft.net; netdev@vger.kernel.org Subject: Re: port bound SAs Paul Moore [off-list ref] wrote:
aha - so with racoon (which uses pfkey) I cannot make this work
Either fix racoon to use xfrm or go with a properly maintained key manager like one of the *swans. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} [off-list ref] Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt