From owner-freebsd-i386@FreeBSD.ORG Thu Nov 27 03:10:02 2008 Return-Path: Delivered-To: freebsd-i386@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5F7E0106564A for ; Thu, 27 Nov 2008 03:10:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 46BEB8FC20 for ; Thu, 27 Nov 2008 03:10:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id mAR3A2xB092227 for ; Thu, 27 Nov 2008 03:10:02 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id mAR3A2Tb092226; Thu, 27 Nov 2008 03:10:02 GMT (envelope-from gnats) Resent-Date: Thu, 27 Nov 2008 03:10:02 GMT Resent-Message-Id: <200811270310.mAR3A2Tb092226@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-i386@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, wang jiabo Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1F6991065672 for ; Thu, 27 Nov 2008 03:00:23 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id 17ACC8FC19 for ; Thu, 27 Nov 2008 03:00:23 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.3/8.14.3) with ESMTP id mAR30MIC002024 for ; Thu, 27 Nov 2008 03:00:22 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.3/8.14.3/Submit) id mAR30M9V002019; Thu, 27 Nov 2008 03:00:22 GMT (envelope-from nobody) Message-Id: <200811270300.mAR30M9V002019@www.freebsd.org> Date: Thu, 27 Nov 2008 03:00:22 GMT From: wang jiabo To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: i386/129218: freebsd6.2 kernel cannot support ipsec "-E null -A hmac-sha1", FreeBSD7.0 kernel cannot support -A aes-xcbc-mac X-BeenThere: freebsd-i386@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: I386-specific issues for FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Nov 2008 03:10:02 -0000 >Number: 129218 >Category: i386 >Synopsis: freebsd6.2 kernel cannot support ipsec "-E null -A hmac-sha1", FreeBSD7.0 kernel cannot support -A aes-xcbc-mac >Confidential: no >Severity: serious >Priority: high >Responsible: freebsd-i386 >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Nov 27 03:10:01 UTC 2008 >Closed-Date: >Last-Modified: >Originator: wang jiabo >Release: FreeBSD6.2 and 7.0 >Organization: redhat >Environment: FreeBSD6.2 release FreeBSD7.0 release >Description: on FreeBSD6.2: I setup setkey file: flush; spdflush; add 3ffe:501:ffff:103:20a:ebff:fe85:9e56 3ffe:501:ffff:104:21d:fff:fe19:59fc esp 0x2000 -m transport -E null -A hmac-sha1 “ipv6readylogsha11to2”; spdadd 3ffe:501:ffff:103:20a:ebff:fe85:9e56 3ffe:501:ffff:104:21d:fff:fe19:59fc any -P in ipsec esp/transport//require; add 3ffe:501:ffff:104:21d:fff:fe19:59fc 3ffe:501:ffff:103:20a:ebff:fe85:9e56 esp 0x1000 -m transport -E null -A hmac-sha1 “ipv6readylogsha12to1”; spdadd 3ffe:501:ffff:104:21d:fff:fe19:59fc 3ffe:501:ffff:103:20a:ebff:fe85:9e56 any -P out ipsec esp/transport//require; system report： The result of line 3 : Invalid argument The result of line 5 : Invalid argument on FreeBSD7.0: I setup setkey file: add 3ffe:501:ffff:103:20a:ebff:fe85:9e56 3ffe:501:ffff:104:21d:fff:fe19:59fc esp 0x2000 -m transport -E 3des-cbc "ipv6readylogo3descbc1to2" -A aes-xcbc-mac "ipv6readaesx1to2"; then run: * setkey -f /etc/ipsec.conf* system report : line 4 : Not supported at [ipv6readaesx1to2] parse failed, line 4. >How-To-Repeat: set setkey configuration, and run "setkey -f setkey.conf" >Fix: >Release-Note: >Audit-Trail: >Unformatted: