Re: ipsec broken

2020-12-28 Thread Alberto Bursi
On 28/12/20 11:43, Mao Mei wrote: that package is maintained in the community feeds, please open an issue https://github.com/openwrt/packages/issues and use "@stintel" in the maintainer field to ping the maintainer Thanks for reply, but I think it's not strongswan issue, but a kernel issue.

Re: Re: ipsec broken

2020-12-28 Thread Mao Mei
> that package is maintained in the community feeds, please open an issue > https://github.com/openwrt/packages/issues > and use "@stintel" in the maintainer field to ping the maintainer Thanks for reply, but I think it's not strongswan issue, but a kernel issue. It's easy to verify. #opkg instal

Re: ipsec broken

2020-12-28 Thread Alberto Bursi
On 27/12/20 16:49, Mao Mei wrote: It seems that ipsec has been broken for a long time. see https://forum.openwrt.org/t/ipsec-has-been-broken-for-a-while/81120 log on mt7621: 12[CFG] selected proposal: ESP:AES_CBC_128/HMAC_SHA1_96/NO_EXT_SEQ 12[KNL] got SPI cecfbd68 12[KNL] adding SAD entry w

ipsec broken

2020-12-27 Thread Mao Mei
It seems that ipsec has been broken for a long time. see https://forum.openwrt.org/t/ipsec-has-been-broken-for-a-while/81120 log on mt7621: 12[CFG] selected proposal: ESP:AES_CBC_128/HMAC_SHA1_96/NO_EXT_SEQ 12[KNL] got SPI cecfbd68 12[KNL] adding SAD entry with SPI cecfbd68 and reqid {1} 12[KNL]