[Openswan Users] Re: KLIPS or NETKEY on 2.6 kernels

Herbert Xu herbert at gondor.apana.org.au
Thu Apr 14 08:36:12 CEST 2005


On Wed, Apr 13, 2005 at 04:55:50PM +0200, Paul Wouters wrote:
> 
> I believe this bug was also originally not really an openswanKLIPS to
> openswanNETKEY problem, but an openswanKLIPS-Racoon problem, which was
> traced to racoon either using a wrong transform, or people telling it,
> and racoon allowing, bogus transforms.

That's right.  Racoon allowed and still allows arbitrary transform
combinations, even ones that are unconventional.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert at gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt


More information about the Users mailing list