[Openswan Users] klips and setkey

[Thomas Geulig]

Hi David,

any news on this?

avital sela wrote:
> On Thu, Apr 1, 2010 at 2:31 AM, David McCullough <
>
> david_mccullough at mcafee.com> wrote:
> > Jivin avital sela lays it down ...
> > > When I added support for OCF (I'm using cryptosoft driver for now) I
> > > get
> >
> > the following messages all the time
> >
> > > KLIPS klips_debug:ipsec_rcv: auth failed on incoming packet from
> >
> > 192.168.16.124 (replay=4): calculated hash=000040210000000000000200
> > received hash=ae4383e40fca800003d1f1ac, dropped
> >
> >
> > I have another report of this on the ocf-linux mailing list.  Something
> > must
> > have gone astray in the last round of cryptosoft updates.  cryptosoft was
> > pretty much rewritten for this release (I am assuming you are using the
> > 2010
> > ocf release ?).
>
> Yes, ocf-linux-26-20100325.patch , openswan-2.6.25

I just updated to ocf-20100325 to get the async API (to work with the
IXP HW kernel driver), and I'm seeing the same.

> > Just for reference,  is this an x86 system ?  SMP ?
>
> mips (24k) uniprocessor with RT patch.
>

For me, it's ARM.

BTW, I had a small compile problem which should affect all kernel
versions between 2.6.22 and 2.6.32 (patch attached).

Thomas

-------------- next part --------------
A non-text attachment was scrubbed...
Name: cryptosoft.c.patch
Type: text/x-patch
Size: 607 bytes
Desc: not available
Url : http://lists.openswan.org/pipermail/users/attachments/20100506/f55a6f58/attachment.bin