Messages in this thread | | | From | Herbert Xu <> | Subject | Re: Minor IPSec bug + solution | Date | Fri, 17 Sep 2004 07:19:23 +1000 |
| |
Martin Bouzek <martin.bouzek@radas-atc.cz> wrote: > > I was setting up an VPN via IPSec in kernel 2.6.x on IPv4 and found the > following bug. It is not possible to set up an IPComp/ESP tunnel with > IPComp set as mandatory. The following setup works fine for me:
You can never set IPComp as mandatory because ipcomp_output() will not compress anything that is incompressible.
> function. For tunnels it returns > > tmpl->optional && !xfrm_state_addr_cmp(tmpl, x, family);
The check is correct as it is. Internal states must never match any required transform. -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |