On Sun, 26 Jun 2005 21:07:50 +0200, in sentex.lists.freebsd.questions
you wrote:

hi there,

after updating my freebsd to 5.4-stable, i can't make my racoon work as
before.

Strange error.  I would start by recompiling racoon.  Are you using
the latest version from the ports as well ?
I am using
5.4-STABLE FreeBSD 5.4-STABLE #1: Thu Jun  2
with 20050510a using FAST_IPSEC

2005-06-27 08:34:13: INFO: main.c:172:main(): @(#)package version
freebsd-20050510a
2005-06-27 08:34:13: INFO: main.c:174:main(): @(#)internal version
20001216 [EMAIL PROTECTED]
2005-06-27 08:34:13: INFO: main.c:175:main(): @(#)This product linked
OpenSSL 0.9.7e 25 Oct 2004 (http://www.openssl.org/)
2005-06-27 08:34:13: ERROR: pfkey.c:2394:pk_checkalg(): Must get supported
algorithms list first.
2005-06-27 08:34:13: ERROR: cftoken.l:494:yyerror():
/usr/local/etc/racoon/racoon.conf:129: ";" algorithm 3DES not supported
2005-06-27 08:34:13: ERROR: cfparse.y:1410:cfparse(): fatal parse failure
(1 errors)
-

FreeBSD 5.4-STABLE #2: Sun Jun 26 17:53:14 CEST 2005

options         IPSEC
options         IPSEC_DEBUG


i get this error message:

2005-06-26 21:01:24: ERROR: pfkey.c:2394:pk_checkalg(): Must get
supported algorithms list first.
2005-06-26 21:01:24: ERROR: cftoken.l:494:yyerror():
/usr/local/etc/racoon/racoon.conf:156: ";" algorithm 3DES not supported

If you did upgrade racoon, is it something goofy like it insisting
3DES be written as 3des now ?

        proposal {
                encryption_algorithm 3des;
                hash_algorithm sha1;
                authentication_method pre_shared_key ;
                dh_group 2 ;
        }

it sends error message wheter i write it 3des or 3DES.

_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to