[Bug 218907] tcpmd5 kernel module on STABLE/11 doesn't work with vultr bgp via bird

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=218907

Andrey V. Elsukov <ae at FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |melifaro at FreeBSD.org

--- Comment #5 from Andrey V. Elsukov <ae at FreeBSD.org> ---
(In reply to Joseph Mulloy from comment #4)
> (In reply to Andrey V. Elsukov from comment #3)
> Thanks for the patch to bird. It's working for the IPv4 version of bird but
> I'm still having trouble with the IPv6 version, bird6. The bird6 package is
> a subordinate package so it should get the same patches, correct?

Yes, bird6 uses the same patches, but you still need to rebuild it too.

> I'm curious why this wasn't an issue with the old kernel code, but I'm glad
> it's working. Now that I'm getting a better understanding of how this works
> it seems I could have also used the setkey utility instead of having bird
> handle the md5 signature stuff.

The behavior was unintended changed in the r313330, now TCP-MD5 requires
correct SA for both direction, since both are used.

-- 
You are receiving this mail because:
You are the assignee for the bug.