Hi,
when using my RAS account with 2.6.11-rc3, I see a lot of
ESP: sha1 digestsize 20 != 0
messages in my logs and the IPsec tunnel is not working. I tracked the
problem down to the change below. After reverting this patch, everything
works like before.
Regards
Marcel
ChangeSet@xxxxxxxxxxxx, 2005-01-25 21:53:42-08:00, herbert@xxxxxxxxxxxxxxxxxxx
[XFRM]: Probe selected algorithm only.
This patch removes an annoying problem in xfrm_user. As it is every
time an SA is added it probes every known algorithm in the universe.
Now if they all existed it would be OK. However, for the ones which
don't actually exist this causes multiple /sbin/modprobe processes to
be spawned which slows the system down when you're adding hundreds of
SAs.
Since we know the type of algorithm required when we're adding a new
SA, we can get away with only probing the selected algorithms. This
is what the following patch does for xfrm_user.
|