(racoon2 64) Re: racoon2 development

Le mardi 21 mars 2006 =C3=A0 11:00 +0100, Franck GILLET a =C3=A9crit :
> Hello all,
>=20
> I have some questions...
>=20
> 1=C2=B0)
> I want to understand racoon functioning. I found a document that
> describe the daemons and interactions but it is written in japanese.
> Where can I get any documentation? If such a doc doesn't exist, I will
> read source code...
>=20
> 2=C2=B0)
> How to subscribe to "racoon2_@_kame.net" mailing list?

Sorry for this question. I received this mail. So I think I am yet
subscribed!

>=20
> 3=C2=B0)
> I tested racoon2 in IPv6 context with certficate authentication. It
> works but... when I start daemon SPMD then IKED, the tunnel doesn't wor=
k
> immediately.
>=20
> $ setkey -D
> 2001:660:3203:1032:204:75ff:fe7f:7278
> 2001:660:3203:1032:212:3fff:fe79:f6ef
>         esp mode=3Dtransport spi=3D0(0x00000000) reqid=3D0(0x00000000)
>         seq=3D0x00000000 replay=3D0 flags=3D0x00000000 state=3Dlarval
>         created: Mar 21 09:31:11 2006   current: Mar 21 09:31:17 2006
>         diff: 6(s)      hard: 30(s)     soft: 0(s)
>         last:                           hard: 0(s)      soft: 0(s)
>         current: 0(bytes)       hard: 0(bytes)  soft: 0(bytes)
>         allocated: 0    hard: 0 soft: 0
>         sadb_seq=3D1 pid=3D3584 refcnt=3D0
> 2001:660:3203:1032:212:3fff:fe79:f6ef
> 2001:660:3203:1032:204:75ff:fe7f:7278
>         esp mode=3Dtransport spi=3D47136074(0x02cf3d4a) reqid=3D0(0x000=
00000)
>         seq=3D0x00000000 replay=3D0 flags=3D0x00000000 state=3Dlarval
>         created: Mar 21 09:31:11 2006   current: Mar 21 09:31:17 2006
>         diff: 6(s)      hard: 30(s)     soft: 0(s)
>         last:                           hard: 0(s)      soft: 0(s)
>         current: 0(bytes)       hard: 0(bytes)  soft: 0(bytes)
>         allocated: 0    hard: 0 soft: 0
>         sadb_seq=3D0 pid=3D3584 refcnt=3D0
> ##
> I suspect SAD entry which has a spi=3D0x0...
> After a moment, I get a real negociation... But there are multiple SA
> corresponding to my link and I must do a flush of my SADB (setkey -F) s=
o
> that IKEv2 works fine (I test it with PING6 and verify encryption with
> TCPDUMP).
>=20
> I know C language, so I can fix the bug. I hope that someone can guide
> me. I will describe my problem when I will able to get interesting logs=
.
>=20
> Thanks in advance.
>=20
> Best Regards.
>=20
> Franck GILLET.
> [email protected]
>=20