5.4-stable vs racoon

[Géczi Szabolcs]

> On Sun, 26 Jun 2005 21:07:50 +0200, in sentex.lists.freebsd.questions
> you wrote:
>
>>hi there,
>>
>>after updating my freebsd to 5.4-stable, i can't make my racoon work as
>>before.
>
> Strange error.  I would start by recompiling racoon.  Are you using
> the latest version from the ports as well ?
> I am using
> 5.4-STABLE FreeBSD 5.4-STABLE #1: Thu Jun  2
> with 20050510a using FAST_IPSEC
>
2005-06-27 08:34:13: INFO: main.c:172:main(): @(#)package version
freebsd-20050510a
2005-06-27 08:34:13: INFO: main.c:174:main(): @(#)internal version
20001216 sakane at kame.net
2005-06-27 08:34:13: INFO: main.c:175:main(): @(#)This product linked
OpenSSL 0.9.7e 25 Oct 2004 (http://www.openssl.org/)
2005-06-27 08:34:13: ERROR: pfkey.c:2394:pk_checkalg(): Must get supported
algorithms list first.
2005-06-27 08:34:13: ERROR: cftoken.l:494:yyerror():
/usr/local/etc/racoon/racoon.conf:129: ";" algorithm 3DES not supported
2005-06-27 08:34:13: ERROR: cfparse.y:1410:cfparse(): fatal parse failure
(1 errors)
-

FreeBSD 5.4-STABLE #2: Sun Jun 26 17:53:14 CEST 2005

options         IPSEC
options         IPSEC_DEBUG

>>
>>i get this error message:
>>
>>2005-06-26 21:01:24: ERROR: pfkey.c:2394:pk_checkalg(): Must get
>>supported algorithms list first.
>>2005-06-26 21:01:24: ERROR: cftoken.l:494:yyerror():
>>/usr/local/etc/racoon/racoon.conf:156: ";" algorithm 3DES not supported
>
> If you did upgrade racoon, is it something goofy like it insisting
> 3DES be written as 3des now ?

         proposal {
                 encryption_algorithm 3des;
                 hash_algorithm sha1;
                 authentication_method pre_shared_key ;
                 dh_group 2 ;
         }

it sends error message wheter i write it 3des or 3DES.