I noticed as recenly as 2.6.11-rc3-bk3 that ipv4 ipsec is broken. I'm currently
using
openswan as my ike daemon. This was working with the same ike daemon and config
as
(I think) recenrly as 2.6.11-rc2.
Before I go binary searching for the change that broke it, I was wondering if
anyone
knows offhand what the issue might be from these error messages in my kernel
log:
NET: Registered protocol family 15
ESP: md5 digestsize 16 != 0
ESP: md5 digestsize 16 != 0
ESP: md5 digestsize 16 != 0
ESP: md5 digestsize 16 != 0
openswan dies somewhere between phase 1 and phase 2 negotiation with an
internal error.
Regards,
Matthew Galgoci
--
Matthew Galgoci
System Administrator
Red Hat, Inc
919.754.3700 x44155
|