https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=263379
--- Comment #2 from Eugene Grosbein <eu...@freebsd.org> --- (In reply to John Baldwin from comment #1) I'm not an IPSec expert in any way. I tend to agree that this setup may be broken, if you say so. I'm talking about setkey(8) manual page that still states: ALGORITHMS The following list shows the supported algorithms. The protocol and algorithm are almost completely orthogonal. And about compatibility issued when you have multiple stable/12 peers and want to upgrade to stable/13 sequentially not breaking encrypted links. -- You are receiving this mail because: You are on the CC list for the bug.