netdev.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* Key change for TCP_MD5
@ 2009-12-02  0:27 Xiaochun Lu
  2009-12-02 14:13 ` William Allen Simpson
  0 siblings, 1 reply; 2+ messages in thread
From: Xiaochun Lu @ 2009-12-02  0:27 UTC (permalink / raw)
  To: netdev; +Cc: linux-kernel

Hi, ALL

This is regarding to TCP-MD5 option [RFC2385].  In current
implementation, only one md5 password is saved in the kernel and it
brings in the problem for changing key:  Changing key in the middle of
tcp session will break the session unless new md5 password is updated
at both ends at the same time (there is no window for key change).
Does anybody know any patches currently exist to address this issue? I
know rfc4808 is targeting to solve this issue. Does there any plan to
implement rfc4808 for linux?

Best Regards!


Shawn Lu

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2009-12-02 14:13 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-12-02  0:27 Key change for TCP_MD5 Xiaochun Lu
2009-12-02 14:13 ` William Allen Simpson

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).