IPSEC stop works after r285336

Tue Aug 4 00:18:22 UTC 2015

Sydney Meyer wrote this message on Mon, Aug 03, 2015 at 01:15 +0200:
> the revision i built included gnn's patches to setkey already.
> 
> I have tried to setup a tunnel using strongswan with gcm as esp cipher mode, but the connection fails with "algorithm AES_GCM_16 not supported by kernel"..

It looks like GCM isn't compiled by default by the port...  Try the
attached patch to
src/libhydra/plugings/kernel_pfkey/kernel_pfkey_ipsec.c...  it may
require more modifications...

Someone else would be better to work on this...

-- 
  John-Mark Gurney				Voice: +1 415 225 5579

     "All that I will do, has been done, All that I have, has not."
-------------- next part --------------
A non-text attachment was scrubbed...
Name: strongswan.patch
Type: text/x-diff
Size: 793 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-current/attachments/20150803/d7963e94/attachment.bin>