Re: ESP_NULL redefined

>>>>> On Thu, 12 Jun 2003 10:56:58 -0400, Robert Story <[email protected]> said:

Robert> A more interesting question is: why do plutoplus and cerberus
Robert> use different values for cipher algorithms?

Yeah, I thought I asked that very question too.

Robert> As far as I can tell, cerberus is only using these defines in
Robert> local structures, as identifiers. They are not used for
Robert> anything that goes over the wire. This makes sense, as the
Robert> values do not match the ISAKMP ESP transform values.

Right.  The questions are:

1) are the values ever passed between cerberus and plutoplus?
2) were the values chosen arbitrarily or is there some math somewhere
   that requires them at those values (in one package or another)?
   Unlikely, but possible.
3) think there are plutoplus files that are accidentally getting the
   wrong definition due to include order, etc.  That'd be the real
   bad.

these all boil down to:

4) would we break anything by redefining them to be the same.

I'd suggest we try that since it can only cause problems if they're not.

Robert> So, I'd like to update cerberus to use the same values as pp,
Robert> to eliminate possible confusion. Any objections?

Nope, as long as everything still works.

-- 
Wes Hardaker
Network Associates Laboratories


-------------------------------------------------------
This SF.NET email is sponsored by: eBay
Great deals on office technology -- on eBay now! Click here:
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5