[strongSwan] Question about IKE frag

Tobias Brunner tobias at strongswan.org
Tue May 9 09:53:37 CEST 2017


Hi Emeric,

>>> - accept: announce IKE frag support, accept IKE fragmented packets
>>> - yes:  announce IKE frag support, accept IKE fragmented packets and emit
>>> fragmented packets using the other option to set the max fragment size.
>>
>> That's simple enough to implement.  See the fragments-accept branch.
> 
> Thanks for implementing this. However, there is no .c code involved in the mentioned branch: is it enough to make it work?

Technically there are two changes to .c files, but yes these changes are
enough.  The reason is that fragmentation is only triggered by `yes` and
`force`, the notification (or vendor ID), however, by `!no`.

Regards,
Tobias



More information about the Users mailing list