Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 07 Dec 2006 17:41:09 +0200
From:      Sergey Alexanov <freak@volia.net>
To:        freebsd-questions@freebsd.org
Subject:   Openbgpd TCP-MD5
Message-ID:  <45783615.3030100@volia.net>

next in thread | raw e-mail | index | archive | help
Hello,

Seemingly like you don't have rfc 2385 support in your kernel

from /usr/src/sys/conf/NOTES :

# TCP_SIGNATURE adds support for RFC 2385 (TCP-MD5) digests. These are
# carried in TCP option 19. This option is commonly used to protect
# TCP sessions (e.g. BGP) where IPSEC is not available nor desirable.
# This is enabled on a per-socket basis using the TCP_MD5SIG socket option.
# This requires the use of 'device crypto', 'options FAST_IPSEC' or 'options
# IPSEC', and 'device cryptodev'.
#options        TCP_SIGNATURE           #include support for RFC 2385


Regards,

-- 
Sergey Alexanov
SA1215-RIPE
freak@volia.net




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?45783615.3030100>