Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 18 Apr 2022 19:01:53 +0000
From:      bugzilla-noreply@freebsd.org
To:        net@FreeBSD.org
Subject:   [Bug 263379] [regression] [ipsec] compatibility broken between stable/12 and stable/13 opencrypto in AEAD mode
Message-ID:  <bug-263379-7501-2Hc0xRseM2@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-263379-7501@https.bugs.freebsd.org/bugzilla/>
References:  <bug-263379-7501@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D263379

--- Comment #5 from John Baldwin <jhb@FreeBSD.org> ---
I have a review for the manpage at https://reviews.freebsd.org/D34947 (Euge=
ne,
I couldn't add you on the review via your freebsd.org username for some
reason?)

In terms of how to inform other users, we could perhaps add a check to
stable/12 to warn users about using an explicit -A in combination with AES-=
GCM
just as we have warnings in place now for older cipher suites deprecated in
FreeBSD 13.  I suspect such uses are somewhat rare though given it's not a
standard combination?  (There's no support in IKE for specifying a combinat=
ion
like this for example.)

--=20
You are receiving this mail because:
You are on the CC list for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-263379-7501-2Hc0xRseM2>