[Swan] SHA2 support for ESP in KLIPS?

Paul Wouters pwouters at redhat.com
Tue Jun 25 06:42:12 EEST 2013


On Tue, 25 Jun 2013, David McCullough wrote:

>> Looking at IKE_ALG, it seems that we always need it and the #ifdef
>> should just be killed. The same for KERNEL_ALG too?
>>
>> In fact, this one even seems to have mixed up the two:
>>
>> #ifdef KERNEL_ALG
>>                 alg_info_addref(IKETOINFO(c->alg_info_ike));
>> #endif
>>
>>
>> So I'd like to suggest we clean these defines up and remove them, as the
>> code seems to be always required.
>
> Agreed.

Done and tested with netkey and klips (though it should not have
affected the kernel stack)

Paul


More information about the Swan mailing list