Date: Tue, 10 Jan 2012 09:01:35 +0100 From: Borja Marcos <borjam@sarenet.es> To: Claudio Jeker <cjeker@diehard.n-r-g.com> Cc: freebsd-net@freebsd.org Subject: Re: openbgpds not talking each other since 8.2-STABLE upgrade Message-ID: <1F04F4D5-35E9-4B5F-9D43-F5F8035BA462@sarenet.es> In-Reply-To: <20120109230130.GA3819@diehard.n-r-g.com> References: <99A5FFD9-8815-4CCC-9868-FB2E3D799566@gridfury.com> <4F027BC0.1080101@FreeBSD.org> <8F87C898-3290-41B9-ACDF-3558D7C28D74@gmail.com> <20120103152909.GA83706@sandvine.com> <680405C8-3323-49BC-AE59-494FC394B6F6@sarenet.es> <20120104092824.GA24657@diehard.n-r-g.com> <FBEBE2F1-AE82-4347-A3AA-448665220756@sarenet.es> <20120109230130.GA3819@diehard.n-r-g.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Jan 10, 2012, at 12:01 AM, Claudio Jeker wrote: > Since it is possible to add MD5 for neighbors on config reload and the > listening sockets are normaly not closed and reopened on config reload = it > was the easiest to set the MD5 option on all listening sockets no = matter > what (especially since at that time OpenBSD was the only BSD doing TCP = MD5 > and the always enable was there from the beginning (actually the = MD5SUM > support was done for/with OpenBGPD). I see, so then the TCP stack should only set and check MD5 signatures = provided there's a matching CPD entry. Otherwise, using a random key = doesn't make sense at all. Right? ;) Borja.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1F04F4D5-35E9-4B5F-9D43-F5F8035BA462>