Re: pluto + kernel 2.6

-----BEGIN PGP SIGNED MESSAGE-----


[I recommend the design list for this conversation.]

| From: tito <[email protected]>
| 
| I have read at "https://nso.freeswan.nl/archives/design/2003-October/msg00006.html" that Pluto doesn't yet support 
| IPv6 fully. Is this true?
| I have tried freeswan-2.03-rc1.tar.gz over a 2.6 kernel using user-mode-linux and it works for IPv4 but not for IPv6. 
| Trying "ipsec auto --add NAME" results in:
| 	whack error: "sample" non-ipv6 address may not contain `:' "MY IPv6 IP ADDRESS"
| Is it my fault or pluto doesn't support IPv6?

I don't know the whole picture, but I do know something.

Pluto knows about IPv6, but this code is not extensively tested.  So
there might be bugs.

Pluto does not know how to tell KLIPS about IPv6 -- a good thing,
since KLIPS knows nothing about IPv6.

I don't remember whether the scripts that drive Pluto (ipsec auto, in
particular) know about IPv6.

I don't know whether the new 2.6 support in Pluto knows about IPv6 and
how to talk to the kernel about IPv6.

I don't know it the IPv6 kernel IPsec knows about IPv6.

These questions can be answered by looking at the code or running
tests or asking the right person(s).  Herbert?

You might post more of your test so that I could more easily try to 
duplicate myself (I'm lazy :-)

Hugh Redelmeier
[email protected]  voice: +1 416 482-8253

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQCVAwUBP4taTsFAuQPManGZAQEYqwQAntR6WPafhu7Sg81tPwA0uTz3b5ZNYEe6
9y3biDrnz3Rp0UnPOAf69JI+BMIEtnGQWqCpRuQv5Efl+mnaDpsyXHZBMn5/EI4k
gO9GXuX3rQY5Jii//k42My8RsybVIZnpcoB6yTouqTiJ+XGH5f6LuYQmg0Us0qfJ
PsfpP031an0=
=JQcJ
-----END PGP SIGNATURE-----