Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 4 Jul 2016 18:27:23 +0200
From:      Patrick Lamaiziere <patfbsd@davenulle.org>
To:        freebsd-net@freebsd.org
Subject:   10/STABLE openbgpd and bgp TCP MD5 signature
Message-ID:  <20160704182723.049f0349@mr185083>

next in thread | raw e-mail | index | archive | help
Hello,

Is there anyone using openbgpd with BGP password with success?

I've setup the password using setkey :
add localip ippeer tcp 0x1000 -A tcp-md5 "secret!";

But as far I can see with tcpdump, the outgoing packets are not signed.
The kernel is built with 
options IPSEC  #IP security (requires device crypto)
options TCP_SIGNATURE #include support for RFC 2385
device crypto
device cryptodev

There is a PR but I don't know if it is still true ?
https://lists.freebsd.org/pipermail/freebsd-ports-bugs/2013-December/267545.html

Thanks, regards




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20160704182723.049f0349>