https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=215946
Bug ID: 215946 Summary: IPsec AH hmac-sha2 does not work with Linux Product: Base System Version: 11.0-RELEASE Hardware: amd64 OS: Any Status: New Severity: Affects Only Me Priority: --- Component: bin Assignee: freebsd-bugs@FreeBSD.org Reporter: jasonma...@gmail.com CC: freebsd-am...@freebsd.org CC: freebsd-am...@freebsd.org IPsec AH doesn't appear to work with Linux when using the SHA2 hmac. On the FreeBSD side, add -n SRC DST ah 5000 -m transport -A hmac-sha2-384 0x96HEXKEY; never works with the Linux, ip xfrm state add src SRC dst DST proto ah spi 5000 auth-trunc "hmac(sha384)" 0x96HEXKEY 192 mode transport I've tried a variety of truncation lengths (96, 128, 192) and hmac-sha2-256 but none worked. However by changing to "-A hmac-sha1 0x40HEXKEY" which has a default 96 bit truncation, AH worked between the two hosts. -- You are receiving this mail because: You are the assignee for the bug. _______________________________________________ freebsd-bugs@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-bugs To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"