[Bug 263379] [regression] [ipsec] compatibility broken between stable/12 and stable/13 opencrypto in AEAD mode
Date: Mon, 18 Apr 2022 17:20:58 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=263379 --- Comment #2 from Eugene Grosbein <eugen@freebsd.org> --- (In reply to John Baldwin from comment #1) I'm not an IPSec expert in any way. I tend to agree that this setup may be broken, if you say so. I'm talking about setkey(8) manual page that still states: ALGORITHMS The following list shows the supported algorithms. The protocol and algorithm are almost completely orthogonal. And about compatibility issued when you have multiple stable/12 peers and want to upgrade to stable/13 sequentially not breaking encrypted links. -- You are receiving this mail because: You are on the CC list for the bug.