[strongSwan] Question about IKE frag
Tobias Brunner
tobias at strongswan.org
Tue May 9 09:53:37 CEST 2017
Hi Emeric,
>>> - accept: announce IKE frag support, accept IKE fragmented packets
>>> - yes: announce IKE frag support, accept IKE fragmented packets and emit
>>> fragmented packets using the other option to set the max fragment size.
>>
>> That's simple enough to implement. See the fragments-accept branch.
>
> Thanks for implementing this. However, there is no .c code involved in the mentioned branch: is it enough to make it work?
Technically there are two changes to .c files, but yes these changes are
enough. The reason is that fragmentation is only triggered by `yes` and
`force`, the notification (or vendor ID), however, by `!no`.
Regards,
Tobias
More information about the Users
mailing list