Re: [Ipsec-tools-devel] [RESEND] Re: Problem with HEAD, resurrection TCP-MD5.
Brought to you by:
mit_warlord,
netbsd
From: Emmanuel D. <ma...@ne...> - 2005-04-26 10:07:58
|
On Tue, Apr 26, 2005 at 11:57:48AM +0200, Ludo Stellingwerff wrote: > >> The patch in CVS for setkey "Revision 1.2: Resurrect TCP-MD5 > >> support. This fixes bin/29915" breaks the usage of the literal > >> protocol name "tcp" i.s.o. number 6. It results in a "syntax > >> error on [-P]". > Just using something like this does not work: > #!setkey -f > spdadd -4 a.a.a.a/24[any] b.b.b.b/24[any] tcp -P in > ipsec esp/tunnel/c.c.c.c-d.d.d.d/require ; > It only goes wrong with tcp, not with "any" or "udp", etc. That works fine at mine. > The problem is a result of the way "upperspec" is defined in > src/setkey/parse.y > Maybe it's enough to remove the #ifdef on line 767 in the HEAD. My system defines SADB_X_SATYPE_TCPSIGNATURE, so that would explain why it works fine. Does removing this ifdef fix your problem? -- Emmanuel Dreyfus ma...@ne... |