Subject: Re: setkey (ipsec) NetBSD 2.99.16 built this AM on Ix86
To: None <current-users@netbsd.org>
From: Emmanuel Dreyfus <manu@netbsd.org>
List: current-users
Date: 02/24/2005 14:51:07
> I've been using ipsec on a computer to computer link for some while. After
> updating my system, setkey no longer wants to parse a line in my ipsec.conf
> file:
> 
> line 8: syntax error at [0x189f694e58a673e688e06589c21c1cf8]
> parse failed, line 8.
> 
> Line 8 is:
> 
> -E rijndael-cbc 0x189f694e58a673e688e06589c21c1cf8

I committed a fix. The problem was that we define SADB_X_EALG_AES in
<net/pfkeyv2.h> while ipsec-tools tests for SADB_X_EALG_AESCBC. It
concluded that we did not implement AES.

This is now fixed (by defining SADB_X_EALG_AESCBC=SADB_X_EALG_AES during
the build) 


-- 
Emmanuel Dreyfus
Le cahier de l'admin BSD 2eme ed. est dans toutes les bonnes librairies
http://www.eyrolles.com/Informatique/Livre/9782212114638/livre-bsd.php
manu@netbsd.org