From owner-freebsd-questions@FreeBSD.ORG Fri Oct 10 03:19:01 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4E225106568C for ; Fri, 10 Oct 2008 03:19:01 +0000 (UTC) (envelope-from alancyang@gmail.com) Received: from hs-out-0708.google.com (hs-out-0708.google.com [64.233.178.244]) by mx1.freebsd.org (Postfix) with ESMTP id 0583A8FC16 for ; Fri, 10 Oct 2008 03:19:00 +0000 (UTC) (envelope-from alancyang@gmail.com) Received: by hs-out-0708.google.com with SMTP id 54so122741hsz.11 for ; Thu, 09 Oct 2008 20:18:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:cc:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:references; bh=VAnPbAu/MO7XtlaPa8I22Z81stCr+b7iN7pvsSXgAuw=; b=GLL+gG5koiPLGSwe0vOOkUar1VtuDfwmLXdv5bR8SoqrdkA4oSSoZIpdJT44xc0EnJ rfOesRsOxs+ehSa+PU9R2MLWHY3FoTMrgfUDu1ci4WU3m7Xtcjm+YMk7aGAq6H/7ia+D Y4sJ2oxPlsv4IZQVgemsGi/+zr1xaKyj2D2Y8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :references; b=UB9HavH3lsHKp+Z8KpsfozEnDeCzS+f7Zr8yGlcCe0PVs/RoTlipt7sQiOj8n6/Yx+ R7YTxYkI+3BlMUnIS73HXF0FLm+Pj0LTq0nzwf7yr7o+lFgyT1Nxoqe8eenPTu9WRNOH 7YOMqNxG4BfAR2zgPJKBM97mN2VqLrD957weA= Received: by 10.90.98.13 with SMTP id v13mr965800agb.105.1223608739826; Thu, 09 Oct 2008 20:18:59 -0700 (PDT) Received: by 10.90.94.14 with HTTP; Thu, 9 Oct 2008 20:18:59 -0700 (PDT) Message-ID: <290865fd0810092018v59aeecc1rfc38790c0fde2f5e@mail.gmail.com> Date: Thu, 9 Oct 2008 20:18:59 -0700 From: "alan yang" To: "VANHULLEBUS Yvan" In-Reply-To: <20081009205636.GA3002@zeninc.net> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <290865fd0810090846y57bbdc1fs3db5c5334fe80c09@mail.gmail.com> <20081009205636.GA3002@zeninc.net> Cc: freebsd-hackers@freebsd.org, freebsd-questions@freebsd.org Subject: Re: setkey panic freebsd7 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Oct 2008 03:19:01 -0000 that single line of adding SA in a setkey.conf file with /sbin/setkey -f setkey.conf would fail 100% from all my try. /usr/local/sbin/setkey just tried, failed also. 'fill in PR' haven't done that before, could you please advise. thanks for looking into! On Thu, Oct 9, 2008 at 1:56 PM, VANHULLEBUS Yvan wrote: > Hi. > > > On Thu, Oct 09, 2008 at 08:46:32AM -0700, alan yang wrote: >> i wonder people ran into similar issue on setkey with freebsd7 that >> panic at ~/crypto/sha1.c:263 within sha1_result() >> digest[0] = ctxt->h.b8[3]; digest[1] = ctxt->h.b8[2]; >> >> on the following sadb add with setkey: >> add 192.168.0.101 192.168.0.110 esp-old 0x10001 -m any -E des-cbc >> "12345678" -A keyed-sha1 "12345678123456781234" >> >> thanks in advance on any hints. > > I guess most people just don't use static SAs anymore :-) > > Can you reproduce the bug ? > Are you using /sbin/setkey (provided by FreeBSD), > /usr/local/sbin/setkey (provided by ipsec-tools), or does it crash > with both ? > > > If you can reproduce it, please fill in a PR, Bjoern or I will take > it. > > Anyways, I'll have a look asap at that part of the code, to see if I > can find "something". > > Any extra information on how to reproduce the bug is welcome ! :-) > > > Yvan. >