[Openswan Users] Compression with Linux kernel 2.6

[Herbert Xu]

On Thu, May 12, 2005 at 01:28:20AM +0200, Paul Wouters wrote:
> 
> The latestfail report we got had this:
> 
> # ipsec auto --up connname
> 104 "connname" 1: STATE_MAIN_I1: initiate
> 106 "connname" 1: STATE_MAIN_I2: sent MI2, expecting MR2
> 108 "connname" 1: STATE_MAIN_I3: sent MI3, expecting MR3
> 004 "connname" 1: STATE_MAIN_I4: ISAKMP SA established
> 003 "connname" 0000002: ERROR: netlink_get_spi for comp.0 at 1.2.3.4 failed 
> with errno 22: Invalid argument

This is really old.  I fixed this nearly two years ago :)

Any idea why RedHat isn't updating this package or is this one of their
unsupported product lines?

If we really cared we can work around the problem in Openswan.  It's
just a matter of detecting the EINVAL return value from get_spi calls
on IPComp SAs, and then retrying the call with the maxspi's byte order
swapped.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert at gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt