similar to: 6412600 IPsec SOFT EXPIRE inaccurately reports number of bytes protected by SA

Guys, OK, now that we have the new core contributors squared away, we can go back to finishing the contributors list. There were some people who got added and then there is existing contributors list. I think Darren''s suggestion to wait to add new core contributors is fine (let the new constitution settle down and we can in the meanwhile have a more inclusive look at both rather than

Author: markfen Repository: /hg/zfs-crypto/gate Revision: ca1aafe8876ceace0d6a4a46d7b4db9181de14e8 Log message: 6296920 IPsec 3DES can''t be used in two-key mode Files: update: usr/src/common/crypto/des/des_impl.c

I''m just-so-fresh to the list, so hello everyone. I''m having a realy hard time with setting up very simple bandwidth management. What I am trying to do is setup a 10Mbit interface to send at only 1920kbit to most of the network (to make sure it hardly ever tops 2mbit). I did succeed with the ingress traffic... With egress however, I get very odd results at different speeds. With

Hi, I have been using IPsec to communicate between a laptop that tracks -stable and a Linksys BEFVP41 router. I only use it infrequently, but it's been working great. My setup is as described in http://grapeape.alerce.com/linksys-ipsec/article.html (which I am planning to submit to the handbook when it's done). I'm no longer able to make an ipsec connection, and I can't put my

Author: sommerfe Repository: /hg/zfs-crypto/gate Revision: 262ad2e7d124ee605cafda82de97b85e3c210dda Log message: 6339712 mistaken assumption that (ipsec_mp != NULL) implies packet was ipsec protected trips assert Files: update: usr/src/uts/common/inet/ip/spd.c

I am attempting to setup an IPSec protected GRE tunnel with a Cisco router. I believe the IPSec association is up, however I cannot move traffic over the tunnel. It is not clear how to integrate the tunnel interface (gre1) with firewall-cmd; adding the interface to trusted does not appear to 'stick'. [root at aqueduct ~]# firewall-cmd --add-interface=gre1 --zone=trusted The interface

Currently, every single piece of code in amdgpu that loops through connectors does it incorrectly and doesn't use the proper list iteration helpers, drm_connector_list_iter_begin() and drm_connector_list_iter_end(). Yeesh. So, do that. Cc: Juston Li <juston.li at intel.com> Cc: Imre Deak <imre.deak at intel.com> Cc: Ville Syrjälä <ville.syrjala at linux.intel.com> Cc: Harry

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:19.ipsec Security Advisory The FreeBSD Project Topic: Incorrect key usage in AES-XCBC-MAC Category: core Module: netinet6 Announced:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:19.ipsec Security Advisory The FreeBSD Project Topic: Incorrect key usage in AES-XCBC-MAC Category: core Module: netinet6 Announced:

Hi everybody, I use RSYNC under windows (cygwin) on both server and client side for syncing 2 big directories over an VPN IPSEC links.(1 GB of data for around 30 000 files). The sync shows these kind of errors for some clients. Here is the command that I use in a batch file to syncing the folders start /w /D "e:/admin/rsyncd/" rsync.exe -az --delete --exclude="SAVE"

Hi, When a IPSec tunnel is established between two peers, I understand that the "normal" situation is to have in a given moment two SAs, one for each direction of the tunnel. However, in one of my tunnels (peer P1 running GNU/Linux with setkey and racoon; peer P2 is a Cisco router) there is a large number (around 19) of SAs established (this has been observed in P1 with

I have no idea whatsoever as to why racoon/IKE does not work here. I've tried various how-to documents but found nothing that works for me. Gateway (10.0.0.1) running 4.9-stable. Laptop (10.0.0.10) running 5.2.1-release. Both running racoon-20040408a On the gateway 10.0.0.1 # cat /etc/ipsec.conf add 10.0.0.1 10.0.0.10 esp 691 -E rijndael-cbc "1234567890123456" -A hmac-sha1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:11.ipsec Security Advisory The FreeBSD Project Topic: IPsec replay attack vulnerability Category: core Module: sys_netipsec Announced:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:11.ipsec Security Advisory The FreeBSD Project Topic: IPsec replay attack vulnerability Category: core Module: sys_netipsec Announced:

On Tue, Sep 3, 2019 at 4:49 PM Lyude Paul <lyude at redhat.com> wrote: > > Currently, every single piece of code in amdgpu that loops through > connectors does it incorrectly and doesn't use the proper list iteration > helpers, drm_connector_list_iter_begin() and > drm_connector_list_iter_end(). Yeesh. > > So, do that. In fairness, I think the origin of this code

Dear list, I''m running Shorewall on a dedicated Fedora 7 box. Shorewall is working well as an office DSL router (dynamic IP) with loc and dmz zones. I am now trying to configure IPSec to connect a VPS, "casp", with a static IP to both the firewall and to the loc network behind it. The host to host SA works fine. However, pings from "loc" to "casp" can be

Can anyone help make sense of this? This is an ext3 partition. It's only showing 403GB out of 426GB used, but then it says only 632MB available? Where'd the extra ~25GB go? [scarolan at server]$ df -H /disks/vrac5 Filesystem Size Used Avail Use% Mounted on /dev/sdb2 426GB 403GB 632MB 100% /disks/vrac5

I'm trying to use OpenBTS with Asterisk. I have two phones that are connecting to OpenBTS correctly, but on the Asterisk side the phones can't call each other. I followed this guide: http://gnuradio.org/redmine/projects/gnuradio/wiki/OpenBTSSettingUpAsterisk I set up two phones in sip.conf and extensions.conf. In my SIP output I see this: WARNING[1689]: app_dial.c:2041 dial_exec_full:

Hi, This is my proposal to add floating point accuracy support to LLVM. The intention is that the frontend may provide metadata to signal to the backend that it may select a less accurate (i.e. more efficient) instruction to perform a given operation. This is primarily a requirement of OpenCL, which specifies that certain floating point operations may be computed inaccurately. Comments

Bugzilla has received a request to create a user account using your email address (zfs-crypto-discuss at opensolaris.org). To continue creating an account using this email address, visit the following link by February 28th, 2008 at 03:48 PST: http://defect.opensolaris.org/bz/token.cgi?t=F9zVJ7vXDC&a=request_new_account If you did not receive this email before February 28th, 2008 at 03:48