Frank Solensky wrote:
>
> I noticed that Linux stack doesn't currently support for RFC2385 (MD5
> signatures for TCP packets). This could be useful for the zebra project
> for authenticating BGP connections with other implementations.
Can you use IPsec authentication?
See www.freeswan.org for the Linux implementation.
> I checked various list archives and didn't see any mention of work being
> underway on this -- what's the best way for me to proceed, download code
> and just start implementing?
I don't know how useful these are, but some things to consider:
The /dev/random driver includes MD5 and some code for generating TCP
sequence numbers. I'm inclined to doubt a device driver is the right
place to put what you want to do, but you might want to look at that
code.
|