From: Dan McDonald <danmcd@sun.com>
To: Adrian-Ken R?egsegger <rueegsegger@swiss-it.ch>
Cc: netdev@vger.kernel.org
Subject: Re: [danmcd@sun.com: [Ipsec-tools-devel] SHA-2 and RFC 4868]
Date: Tue, 12 May 2009 10:07:25 -0400 [thread overview]
Message-ID: <20090512140725.GA17920@kebe.East.Sun.COM> (raw)
In-Reply-To: <4A09305B.5040304@swiss-it.ch>
On Tue, May 12, 2009 at 10:16:27AM +0200, Adrian-Ken R?egsegger wrote:
<mucho snippage deleted!>
> > Is this just me, or is there an unfixed kernel problem in other platforms'
> > AH/ESP code?
>
> This issues was discussed (but not resolved) a bit less than a year ago:
>
> http://lkml.org/lkml/2008/6/5/141
Thanks for the thread pointer. I would like it if you guys updated to RFC
4868, but I'm obviously in no position to have any influence. If you wanna
test it, though, OpenSolaris has 4868 support, and if you need help for
interoperability testing, just ask.
BTW, it *is* possible to have user-space supply such parameters. Have a look
at the ipsecalgs(1M) man page for an example:
http://docs.sun.com/app/docs/doc/816-5166/ipsecalgs-1m?l=en&a=view&q=ipsecalgs
In fact, we've done backward compatibility tests with MacOS X by adjusting
the truncation size with ipsecalgs(1M). ISTR it worked with SHA-256.
Dan
prev parent reply other threads:[~2009-05-12 14:22 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-05-08 18:08 [danmcd@sun.com: [Ipsec-tools-devel] SHA-2 and RFC 4868] Dan McDonald
2009-05-12 8:16 ` Adrian-Ken Rüegsegger
2009-05-12 14:07 ` Dan McDonald [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20090512140725.GA17920@kebe.East.Sun.COM \
--to=danmcd@sun.com \
--cc=netdev@vger.kernel.org \
--cc=rueegsegger@swiss-it.ch \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).