Re: Simple IPSEC client with certificate - phase 1 time out

[Frank Wille <frank%phoenix.owl.de@localhost>]

Christos Zoulas wrote:

> | Do we get a pullup for netbsd-7, and maybe netbsd-6?
>
> I asked for them just now.

Thanks!


> | BTW, my problem with setkey on macppc was caused by the missing
> | swcrypto | pseudo device in the kernel.
> | 
> | Our IPsec FAQ should mention that you need that, besides "option
> IPSEC". I | know that amd64, i386 and sparc64 have these enabled by
> default now, but no | other port has.
>
> URL?

http://www.netbsd.org/docs/network/ipsec/
In section "Configuring IPsec kernel".

It also mentions IPSEC_ESP, which was removed together with IPSEC_NAT_T
after netbsd-6.

-- 
Frank Wille