On Thu, 30 Oct 2008 09:17:25 +0800
wang_jiabo <jiabwang@redhat.com> wrote:
> Hello, TAHI:
> when I test IPsec suite, 5.1.2 and 5.2.3 report failures.
> do you think 5.1.2 is a bug of ipsecSetSPD.rmt, please give me explain.
> another bug , it is 5.2.3. do you think that the null algorithm
> should have a key in the spd entry.
> we thought that the null algorithm shouldn't have a key in the spd entry
Then, IPsec conformance test set null string to eauthkey.
| 16:29:59 vRemote(ipsecSetSAD.rmt)
| ``/usr/local/v6eval//bin/rhel51//ipsecSetSAD.rmt -t rhel51 -u root -p
| redhat -d cuad0 -o 1 src="3ffe:501:ffff:0001:0000:0000:0000:0001"
| dst="3ffe:501:ffff:0:21d:fff:fe0f:be4e" spi=0x1000 mode=transport
| protocol=esp ealgo=3des-cbc ealgokey=ipv6readylogo3descbcin01 eauth=null
| eauthkey= ''
^^^^^^^^^^^^
Your ipsecSetSAD.rmt sets a key on its own.
Best Regards,
----
Mitsuru Chinen <mitch@linux.vnet.ibm.com>