Hi Dave:
I wrote the wrong subject for the last patch. It was really
meant for this one :)
Both encryption and authentication are optional for ESP. However, at
least one of them must be present. The following patch changes init_state
to match that specification. It also changes the IPv6 ESP check to allow
zero-length authentication keys as is the case with the IPv4 version.
Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Cheers,
--
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
esp-alg-check
Description: Text document
|