FYI, the kernel algorithm with no name that was stripped out is: #define SADB_X_AALG_SHA2_256HMAC_TRUNCBUG 252 I think I'll cry ...
On Mon, 9 Jul 2018 at 13:39, Andrew Cagney <[email protected]> wrote: > > Yes. Check the mail archives, for a post from me. I'm sitting on a tweak to > kvmrunner to check for this. Post 3.24 and now post f28? > > On Mon, Jul 9, 2018, 11:10 AM D. Hugh Redelmeier <[email protected]> wrote: >> >> These should be fixed. >> >> In the pluto logs there are a lot of messages but they boil down only >> a couple of messages when the context is stripped: >> >> In pluto logs: >> NONE IKEv1: ESP IKEv2: ESP FIPS (null) >> IKE SA responder matching remote ESP/AH proposals responder SA processing >> returned (null) >> >> >> In console.verbose.txt logs there are very few: >> >> addconn-03/OUTPUT/west.console.verbose.txt:conn: "test" modecfgdns=(null) >> addconn-03/OUTPUT/west.console.verbose.txt:conn: "test" modecfgdomains=(null) >> addconn-03/OUTPUT/west.console.verbose.txt:conn: "test" modecfgbanner=(null) >> addconn-03/OUTPUT/west.console.verbose.txt:conn: "test" mark=(null) >> addconn-03/OUTPUT/west.console.verbose.txt:conn: "test" mark-in=(null) >> addconn-03/OUTPUT/west.console.verbose.txt:conn: "test" mark-out=(null) >> addconn-03/OUTPUT/west.console.verbose.txt:conn: "test" vti_iface=(null) >> algparse-01/OUTPUT/west.console.verbose.txt: NONE IKEv1: >> ESP IKEv2: ESP FIPS (null) >> algparse-02-fips/OUTPUT/west.console.verbose.txt: NONE >> IKEv1: ESP IKEv2: ESP FIPS (null) >> seccomp-01-enabled/OUTPUT/west.console.verbose.txt:[ 66.337557] audit: >> type=1305 audit(1531098460.326:103): auid=4294967295 ses=4294967295 >> subj=system_u:system_r:auditctl_t:s0 op="remove_rule" key=(null) list=1 >> res=1^M >> _______________________________________________ >> Swan-dev mailing list >> [email protected] >> https://lists.libreswan.org/mailman/listinfo/swan-dev _______________________________________________ Swan-dev mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan-dev
