[Openswan dev] MODECFG/IKECFG/MODE CONFIG openswan server and third party clients

Paul Wouters paul at xelerance.com
Wed Dec 6 01:51:58 EST 2006


On Tue, 5 Dec 2006, Michael Richardson wrote:

> >>>>> "Anna" == Anna Wiejak <anias at popoludnica.pl> writes:
>     Anna> Recently I was working on the problem of modeconfig
>     Anna> compatibility between openswan server and softremote
>     Anna> third-party client.  I found the reason why this doesn't work
>     Anna> properly and implemented a workaround on openswan server. The
>     Anna> problem and solution is explained in detail here:
>
>   Please don't make me fish on your blog for the explanation.
>   Post it here as text.

All the text was added by ,e in the bug report:

http://bugs.xelerance.com/view.php?id=709

>     Anna> Openswan implements the modeconfig in a different way then all
>     Anna> other solutions I've seen. I can't find out which behaviour is
>     Anna> correct - it looks like the details of deriving initialization
>
>   Well, openswan interoperates with multiple cisco implementations that
> were done by the authors of the ikecfg draft.
>
>   There is only one way to calculate the initial IV.

So I guess this bug should be reported to softremote then?

Paul


More information about the Dev mailing list