netdev
[Top] [All Lists]

Re: [ESP] Only one algorithm is required

To: "David S. Miller" <davem@xxxxxxxxxx>, netdev@xxxxxxxxxxx
Subject: Re: [ESP] Only one algorithm is required
From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Date: Sat, 14 Aug 2004 20:52:45 +1000
In-reply-to: <20040814104807.GA20572@xxxxxxxxxxxxxxxxxxx>
References: <20040814104807.GA20572@xxxxxxxxxxxxxxxxxxx>
Sender: netdev-bounce@xxxxxxxxxxx
User-agent: Mutt/1.5.6+20040523i
Hi Dave:

I wrote the wrong subject for the last patch.  It was really
meant for this one :)

Both encryption and authentication are optional for ESP.  However, at
least one of them must be present.  The following patch changes init_state
to match that specification.  It also changes the IPv6 ESP check to allow
zero-length authentication keys as is the case with the IPv4 version.
 
Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt

Attachment: esp-alg-check
Description: Text document

<Prev in Thread] Current Thread [Next in Thread>