From owner-freebsd-questions  Wed Oct 31 13:39:34 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from southwark.dsl.net (southwark.dsl.net [65.84.81.9])
	by hub.freebsd.org (Postfix) with ESMTP id 8023037B403
	for <freebsd-questions@FreeBSD.ORG>; Wed, 31 Oct 2001 13:39:21 -0800 (PST)
Received: from dantooine.vindaloo.com (209-87-65-68.client.dsl.net [209.87.65.68])
	by southwark.dsl.net (Postfix) with ESMTP id 25A5C18DBB5
	for <freebsd-questions@FreeBSD.ORG>; Wed, 31 Oct 2001 16:31:46 -0500 (EST)
Received: (from chris@localhost)
	by dantooine.vindaloo.com (8.11.4/8.11.6) id f9VLRWg04377
	for freebsd-questions@FreeBSD.ORG; Wed, 31 Oct 2001 16:27:32 -0500 (EST)
	(envelope-from chris)
Date: Wed, 31 Oct 2001 16:27:32 -0500
From: Christopher Sean Hilton <chris@vindaloo.com>
To: freebsd-questions@FreeBSD.ORG
Subject: Re: IPSEC -- setkey: "Must get supported algorithms list first..."
Message-ID: <20011031162732.C4016@dantooine.vindaloo.com>
References: <20011030182555.A2919@dantooine.vindaloo.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="gKMricLos+KVdGMg"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20011030182555.A2919@dantooine.vindaloo.com>; from chris@vindaloo.com on Tue, Oct 30, 2001 at 06:25:55PM -0500
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


--gKMricLos+KVdGMg
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Oct 30, 2001 at 06:25:55PM -0500, Christopher Sean Hilton wrote:
> Hi, I'm trying to setup a manually keyed IPSec tunnel between two=20
> FreeBSD boxes. No matter how I run setkey I cannot get past this error:
>=20
>      Must get supported algorithms list first...
>=20
> I stole the configuration from the FreeBSD IPSec HowTo figuring that I wo=
uld=20
> modify it to my needs. Here's an actual run:
>=20
> # setkey -dv -c <<EOF

Well, it appears that the joke is on me and it's a cruel one to boot. The=
=20
only apparent function of the -d and -v options to setkey is the generate=
=20
an obscure error message and then exit without actually doing any of the=20
work. Where:

     # setkey -dv -c <<EOF=20

Does not work,=20

     # setkey -c <<EOF

works just fine with exactly the same script...=20

************************************************************************

To all future users of this forum: If you searched via the FreeBSD web page
for this then you got lucky. In the future use groups.google.com's advanced
search to go through *freebsd* and you'll get much better results.

************************************************************************


--=20
Chris Hilton                                 chilton-at-vindaloo-dot-com
------------------------------------------------------------------------
                "All I was doing was trying to get home from work!"
                                                 -- Rosa Parks

--gKMricLos+KVdGMg
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iQEVAwUBO+Bsw4LaxorQlXotAQFE9gf/RJe0e39tDwC9r/Esrm8Igaff2JIV764j
WmdXSoyR5RCoNlcQbxfqqnSBudjwQ5oCae5a0uUdEXBPr8H+LV5fpK/OqaTxel3+
zSNb3qiQKrcMLLfyXhPl3bwTubAYYoYVMXk/PXVcp4MU7lOoDDDB8+zljkhVaLwQ
kCmulUgQNkMNGzD3JZI9baJYVHQzvuNNTSp4QMp28gO6SaUJn7R+Z/0v44gsUZVN
q+ColWMryL+OC4rd6ils4OYx6l6KrbmsXvS5DAPxyTLDaBs+eekkn13HpIU0H7qs
YbNv/pdHFCuAO1m1QvYDMKDRnFcnbZjb8sE2xxvI0HbDjxCUigSAog==
=yAzB
-----END PGP SIGNATURE-----

--gKMricLos+KVdGMg--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message