larafa sondes wrote:
Yes you are right! I didn't compile it. I didn't even select it in the ".config" file when I
compiled the kernel.
Do I have to recompile the kernel or is there any
other  simpler solution?

No, you don't have to recompile the whole kernel if you haven't cleaned your kernel source tree from the previous build.

What worked for me is:
1. make xconfig and select blowfish algo as a module
2. make (only blowfish got compiled)
3. make modules_install
4. run setkey -f yourfile.conf
5. The freshly compiled blowfish module is automatically loaded

Benjamin


Thanks and regards,

Sondes




--- Benjamin Thery <[EMAIL PROTECTED]> a écrit :

Hi,

Are you sure you have compiled the blowfish module
in your kernel?
I can see the same error message with your
configuration on a host where blowfish isn't compiled. It works fine on a host with the blowfish module.

Regards,
Benjamin


larafa sondes wrote:
Hello,

I am using the following security configuration
file
for the MN:

#sa.conf

#MN -> HA transport SA for BUs
add 2001:660:3203:1012::5 2001:660:3203:1012::beef
esp
2000
        -m transport
        -E blowfish-cbc "THIS_IS_ESP_SECRET!!";

#HA -> MN transport SA for BAs
add 2001:660:3203:1012::beef 2001:660:3203:1012::5
esp
2001
        -m transport
        -E blowfish-cbc"THIS_IS_ESP_SECRET!!";

#MN -> HA tunnel SA for HoTIs
add 2001:660:3203:1012::5 2001:660:3203:1012::beef
esp
2003
        -m tunnel
        -E blowfish-cbc"THIS_IS_ESP_SECRET!!";

#HA -> MN tunnel SA for HoTs
add 2001:660:3203:1012::beef 2001:660:3203:1012::5
esp
2004
        -m tunnel
        -E blowfish-cbc"THIS_IS_ESP_SECRET!!";


When I tap:

setkey -f sa.conf

I get the following message:

line 6: Not supported at [THIS_IS_ESP_SECRET!!]
parse failed, line 6.

Had someone got the same problem and found a
solution?
Thanks and regards,

sondes


        

        
                

___________________________________________________________________________
Faites de Yahoo! votre page d'accueil sur le web
pour retrouver directement vos services préférés :
vérifiez vos nouveaux mails, lancez vos recherches
et suivez l'actualité en temps réel.
Rendez-vous sur http://fr.yahoo.com/set

_______________________________________________
mipl mailing list
[email protected]

http://www.mobile-ipv6.org/cgi-bin/mailman/listinfo/mipl

--
B e n j a m i n   T h e r y  - BULL/DT/Open Software
R&D

    http://www.bull.com




        

        
                
___________________________________________________________________________ Faites de Yahoo! votre page d'accueil sur le web pour retrouver directement vos services préférés : vérifiez vos nouveaux mails, lancez vos recherches et suivez l'actualité en temps réel. Rendez-vous sur http://fr.yahoo.com/set


--
B e n j a m i n   T h e r y  - BULL/DT/Open Software R&D

   http://www.bull.com

_______________________________________________
mipl mailing list
[email protected]
http://www.mobile-ipv6.org/cgi-bin/mailman/listinfo/mipl

Reply via email to