Re: svn commit: r218794 - in head: . sys/netipsec

2011-02-21 Thread Garrett Cooper
On Mon, Feb 21, 2011 at 11:14 AM, Doug Barton wrote: > On 02/21/2011 03:01, VANHULLEBUS Yvan wrote: >> >> On Mon, Feb 21, 2011 at 10:21:43AM +0100, Pawel Jakub Dawidek wrote: >>> >>> >  On Mon, Feb 21, 2011 at 09:40:25AM +0100, VANHULLEBUS Yvan wrote: >> >> [RFC4868 and MFC] >>> >>> >  You can't t

Re: svn commit: r218794 - in head: . sys/netipsec

2011-02-21 Thread Doug Barton
On 02/21/2011 03:01, VANHULLEBUS Yvan wrote: On Mon, Feb 21, 2011 at 10:21:43AM +0100, Pawel Jakub Dawidek wrote: > On Mon, Feb 21, 2011 at 09:40:25AM +0100, VANHULLEBUS Yvan wrote: [RFC4868 and MFC] > You can't talk to two such peers with sysctl or without anyway. I assume > that if someon

Re: svn commit: r218794 - in head: . sys/netipsec

2011-02-21 Thread VANHULLEBUS Yvan
On Mon, Feb 21, 2011 at 10:21:43AM +0100, Pawel Jakub Dawidek wrote: > On Mon, Feb 21, 2011 at 09:40:25AM +0100, VANHULLEBUS Yvan wrote: [RFC4868 and MFC] > You can't talk to two such peers with sysctl or without anyway. I assume > that if someone already has tunnels configured and they work, they

Re: svn commit: r218794 - in head: . sys/netipsec

2011-02-21 Thread Bjoern A. Zeeb
On Mon, 21 Feb 2011, Pawel Jakub Dawidek wrote: Hi, On Mon, Feb 21, 2011 at 09:40:25AM +0100, VANHULLEBUS Yvan wrote: Second of all I really think that an UPDATING entry is not enough. We should at least provide sysctl to change it back I sent a mail on freebsd-net@ at the beginning of janua

Re: svn commit: r218794 - in head: . sys/netipsec

2011-02-21 Thread Pawel Jakub Dawidek
On Mon, Feb 21, 2011 at 09:40:25AM +0100, VANHULLEBUS Yvan wrote: > > Second of all I really think that an UPDATING entry is not enough. > > We should at least provide sysctl to change it back > > I sent a mail on freebsd-net@ at the beginning of january, to ask some > feedback from users, and got

Re: svn commit: r218794 - in head: . sys/netipsec

2011-02-21 Thread VANHULLEBUS Yvan
Hi. On Sat, Feb 19, 2011 at 08:34:12AM +0100, Pawel Jakub Dawidek wrote: > On Fri, Feb 18, 2011 at 09:40:13AM +, VANHULLEBUS Yvan wrote: > > Author: vanhu > > Date: Fri Feb 18 09:40:13 2011 > > New Revision: 218794 > > URL: http://svn.freebsd.org/changeset/base/218794 > > > > Log: > > Fixed

Re: svn commit: r218794 - in head: . sys/netipsec

2011-02-18 Thread Pawel Jakub Dawidek
On Fri, Feb 18, 2011 at 09:40:13AM +, VANHULLEBUS Yvan wrote: > Author: vanhu > Date: Fri Feb 18 09:40:13 2011 > New Revision: 218794 > URL: http://svn.freebsd.org/changeset/base/218794 > > Log: > Fixed IPsec's HMAC_SHA256-512 support to be RFC4868 compliant. > This will break interoperabi

svn commit: r218794 - in head: . sys/netipsec

2011-02-18 Thread VANHULLEBUS Yvan
Author: vanhu Date: Fri Feb 18 09:40:13 2011 New Revision: 218794 URL: http://svn.freebsd.org/changeset/base/218794 Log: Fixed IPsec's HMAC_SHA256-512 support to be RFC4868 compliant. This will break interoperability with all older versions of FreeBSD for those algorithms. Reviewed by: