Re: Finding out at runtime which IPSEC options are built into the kernel (IPSEC_NAT_T?)

2021-06-07 Thread Matthias Petermann
Hi Andy, Am 06.06.21 um 14:53 schrieb Andy Ruhl: Hopefully this helps someone searching: The options(4) man page shows this line: strings netbsd | sed -n 's/^_CFG_//p' | unvis (note that "netbsd" is the kernel file, usually at /netbsd) This will work if the kernel has the

Re: Finding out at runtime which IPSEC options are built into the kernel (IPSEC_NAT_T?)

2021-06-06 Thread Jonathan A. Kollasch
On Sun, Jun 06, 2021 at 05:53:37AM -0700, Andy Ruhl wrote: > Hopefully this helps someone searching: > > The options(4) man page shows this line: > > strings netbsd | sed -n 's/^_CFG_//p' | unvis (note that "netbsd" is > the kernel file, usually at /netbsd) > > This will work if the kernel has

Re: Finding out at runtime which IPSEC options are built into the kernel (IPSEC_NAT_T?)

2021-06-06 Thread Andy Ruhl
On Sun, Jun 6, 2021 at 2:49 AM Matthias Petermann wrote: > > ...looks like the IPSEC_NAT_T option no longer exists, but is included > in IPSEC instead. > > > OPTIONS(4): > > " > options IPSEC > Includes support for the IPsec protocol, using the implementation > derived > from

Re: Finding out at runtime which IPSEC options are built into the kernel (IPSEC_NAT_T?)

2021-06-06 Thread Matthias Petermann
...looks like the IPSEC_NAT_T option no longer exists, but is included in IPSEC instead. OPTIONS(4): " options IPSEC Includes support for the IPsec protocol, using the implementation derived from OpenBSD, relying on opencrypto(9) to carry out cryptographic operations.

Finding out at runtime which IPSEC options are built into the kernel (IPSEC_NAT_T?)

2021-06-06 Thread Matthias Petermann
Hello, the subject probably already summarises the question - here is just a brief background: I would like to establish an IPSEC connection from a NetBSD box behind a NAT router to a IPSEC-VPN. My understanding is that the kernel must have the appropriate IPSEC_NET_T-option for this. Can I