[Openswan dev] Patch for review.

Kirill Berezin kyb at online.ru
Wed Jun 30 06:11:47 EDT 2010


I found,  by chance, the AH xmit path for klips protocol stack is a bit 
broken. After a small research I found the ident field for ip header is 
selected after generation of a hash for a packet. According to RFC 2402 
ident must be selected before generation of a hash.

A possible fix is in the attachment, I hope it will be usefull.

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: AH_ident_field_select.diff
Url: http://lists.openswan.org/pipermail/dev/attachments/20100630/38a56e2d/attachment.ksh 

More information about the Dev mailing list