[Openswan Users] 26sec using IPcomp

[Herbert Xu]

On Tue, Jun 28, 2005 at 08:33:53PM +1000, herbert wrote:
> 
> Well, I'll send you a patch as soon as I've fixed my newly upgraded
> pluto to negotiate IPComp at all :)

Unfortunately I haven't had time to work on this yet.  However, while
attempting to locate the source of the bug I noticed that it's already
fixed in CVS head.  However, as I mentioned CVS head may not negotiate
IPComp at all due to a bug elsewhere.

So for the time being please try this patch.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert at gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
-------------- next part --------------
diff -u -r1.24 -r1.25
--- kernel_netlink.c	21 Apr 2005 13:14:32 -0000	1.24
+++ kernel_netlink.c	11 May 2005 22:19:16 -0000	1.25
@@ -589,7 +589,7 @@
     req.p.id.proto = satype2proto(sa->satype);
     req.p.family = sa->src->u.v4.sin_family;
     req.p.mode = (sa->encapsulation == ENCAPSULATION_MODE_TUNNEL);
-    req.p.replay_window = 32;
+    req.p.replay_window = sa->replay_window > 32 ? 32 : sa->replay_window;
     req.p.reqid = sa->reqid;
     req.p.lft.soft_byte_limit = XFRM_INF;
     req.p.lft.soft_packet_limit = XFRM_INF;