On Sun, Aug 15, 2004 at 05:24:12AM +1000, herbert wrote:
>
> > This is userland level policy and I don't think the kernel should be
> > enforcing this.
>
> We should remove the ealg check altogether then?
Please disregard the esp alg check patch altogether. It's comletely
bogus.
The way to get null algorithms through is to attach a non-null algorithm
with the name set to cipher_null/digest_null.
However, we should fix IPv6 to allow null authentication algorithms.
Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Cheers,
--
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
p
Description: Text document
|