(racoon2 63) racoon2 development

Franck GILLET <[email protected]> Tue, 21 Mar 2006 11:00:57 +0100
Newsgroups gmane.network.ipv6.kame.racoon
Message-ID <[email protected]>
Hello all,

I have some questions...

1=C2=B0)
I want to understand racoon functioning. I found a document that
describe the daemons and interactions but it is written in japanese.
Where can I get any documentation? If such a doc doesn't exist, I will
read source code...

2=C2=B0)
How to subscribe to "racoon2_@_kame.net" mailing list?

3=C2=B0)
I tested racoon2 in IPv6 context with certficate authentication. It
works but... when I start daemon SPMD then IKED, the tunnel doesn't work
immediately.

$ setkey -D
2001:660:3203:1032:204:75ff:fe7f:7278
2001:660:3203:1032:212:3fff:fe79:f6ef
        esp mode=3Dtransport spi=3D0(0x00000000) reqid=3D0(0x00000000)
        seq=3D0x00000000 replay=3D0 flags=3D0x00000000 state=3Dlarval
        created: Mar 21 09:31:11 2006   current: Mar 21 09:31:17 2006
        diff: 6(s)      hard: 30(s)     soft: 0(s)
        last:                           hard: 0(s)      soft: 0(s)
        current: 0(bytes)       hard: 0(bytes)  soft: 0(bytes)
        allocated: 0    hard: 0 soft: 0
        sadb_seq=3D1 pid=3D3584 refcnt=3D0
2001:660:3203:1032:212:3fff:fe79:f6ef
2001:660:3203:1032:204:75ff:fe7f:7278
        esp mode=3Dtransport spi=3D47136074(0x02cf3d4a) reqid=3D0(0x00000=
000)
        seq=3D0x00000000 replay=3D0 flags=3D0x00000000 state=3Dlarval
        created: Mar 21 09:31:11 2006   current: Mar 21 09:31:17 2006
        diff: 6(s)      hard: 30(s)     soft: 0(s)
        last:                           hard: 0(s)      soft: 0(s)
        current: 0(bytes)       hard: 0(bytes)  soft: 0(bytes)
        allocated: 0    hard: 0 soft: 0
        sadb_seq=3D0 pid=3D3584 refcnt=3D0
##
I suspect SAD entry which has a spi=3D0x0...
After a moment, I get a real negociation... But there are multiple SA
corresponding to my link and I must do a flush of my SADB (setkey -F) so
that IKEv2 works fine (I test it with PING6 and verify encryption with
TCPDUMP).

I know C language, so I can fix the bug. I hope that someone can guide
me. I will describe my problem when I will able to get interesting logs.

Thanks in advance.

Best Regards.

Franck GILLET.
[email protected]