Re: bin/47894: racoon w/NAT-T - pfkey update: wrong ports

[Egerváry Gergely <gergely%egervary.hu@localhost>]

> You say:
>   "kernel doesn't know its side of negotiation. racoon knows it, but
>   there is no API to send the side information to kernel."
> 
> Probably you should look into the Linuxized racoon code (and the Linux
> IPSec code, if required) how it is handled there.

This is the source of the Debianized racoon:

ftp://ftp.debian.org/debian/pool/main/i/ipsec-tools/ipsec-tools_0.8.2.orig.tar.gz
ftp://ftp.hu.debian.org/debian/pool/main/i/ipsec-tools/ipsec-tools_0.8.2-2.debian.tar.xz

It's the same as the NetBSD racoon in ~ 99 percent. The kernel part is
completely different, but the API should be the same.

Hope it helps.

-- 
Egerváry Gergely