Openbgpd TCP-MD5

Sergey Alexanov freak at volia.net
Thu Dec 7 07:45:40 PST 2006


Hello,

Seemingly like you don't have rfc 2385 support in your kernel

from /usr/src/sys/conf/NOTES :

# TCP_SIGNATURE adds support for RFC 2385 (TCP-MD5) digests. These are
# carried in TCP option 19. This option is commonly used to protect
# TCP sessions (e.g. BGP) where IPSEC is not available nor desirable.
# This is enabled on a per-socket basis using the TCP_MD5SIG socket option.
# This requires the use of 'device crypto', 'options FAST_IPSEC' or 'options
# IPSEC', and 'device cryptodev'.
#options        TCP_SIGNATURE           #include support for RFC 2385


Regards,

-- 
Sergey Alexanov
SA1215-RIPE
freak at volia.net



More information about the freebsd-questions mailing list