(racoon 773) Re: Interoparability with FW-1 broken, patch included
Aidas Kasparas <[email protected]> Wed, 22 Sep 2004 18:36:55 +0300
| Newsgroups | gmane.network.ipv6.kame.racoon |
|---|---|
| Message-ID | <[email protected]> |
YAMASHITA Yutaka wrote: > On Wed, 08 Sep 2004 11:51:02 +0200 > Steffen Neumann <[email protected]> wrote: > > >>System is a Debian Laptop, Kernel 2.6.8, with racoon 0.3.3. Remote is a >>CheckPoint FW-1, R55. The FW-1 seems to be sending a CRL within the >>ISAKMP handshake, which confused racoon. I hacked oakley.c to ignore >>that error, and the connection opens again. >> >>I hope this will help to diagnose the problem >>and create a proper fix in some future version, > > > the original kame racoon code is same as your hacked code long before. > i'm sorry that i don't know why ipsec-tools code is different. > As far as I see it, attached patch is reversed. Both kame and ipsec-tools versions are identical at that point.