(racoon2 63) racoon2 development
Franck GILLET <[email protected]> Tue, 21 Mar 2006 11:00:57 +0100
| Newsgroups | gmane.network.ipv6.kame.racoon |
|---|---|
| Message-ID | <[email protected]> |
Hello all,
I have some questions...
1=C2=B0)
I want to understand racoon functioning. I found a document that
describe the daemons and interactions but it is written in japanese.
Where can I get any documentation? If such a doc doesn't exist, I will
read source code...
2=C2=B0)
How to subscribe to "racoon2_@_kame.net" mailing list?
3=C2=B0)
I tested racoon2 in IPv6 context with certficate authentication. It
works but... when I start daemon SPMD then IKED, the tunnel doesn't work
immediately.
$ setkey -D
2001:660:3203:1032:204:75ff:fe7f:7278
2001:660:3203:1032:212:3fff:fe79:f6ef
esp mode=3Dtransport spi=3D0(0x00000000) reqid=3D0(0x00000000)
seq=3D0x00000000 replay=3D0 flags=3D0x00000000 state=3Dlarval
created: Mar 21 09:31:11 2006 current: Mar 21 09:31:17 2006
diff: 6(s) hard: 30(s) soft: 0(s)
last: hard: 0(s) soft: 0(s)
current: 0(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 0 hard: 0 soft: 0
sadb_seq=3D1 pid=3D3584 refcnt=3D0
2001:660:3203:1032:212:3fff:fe79:f6ef
2001:660:3203:1032:204:75ff:fe7f:7278
esp mode=3Dtransport spi=3D47136074(0x02cf3d4a) reqid=3D0(0x00000=
000)
seq=3D0x00000000 replay=3D0 flags=3D0x00000000 state=3Dlarval
created: Mar 21 09:31:11 2006 current: Mar 21 09:31:17 2006
diff: 6(s) hard: 30(s) soft: 0(s)
last: hard: 0(s) soft: 0(s)
current: 0(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 0 hard: 0 soft: 0
sadb_seq=3D0 pid=3D3584 refcnt=3D0
##
I suspect SAD entry which has a spi=3D0x0...
After a moment, I get a real negociation... But there are multiple SA
corresponding to my link and I must do a flush of my SADB (setkey -F) so
that IKEv2 works fine (I test it with PING6 and verify encryption with
TCPDUMP).
I know C language, so I can fix the bug. I hope that someone can guide
me. I will describe my problem when I will able to get interesting logs.
Thanks in advance.
Best Regards.
Franck GILLET.
[email protected]