Uploaded image for project: 'vpp'
  1. vpp
  2. VPP-1684

IKEv2 with modp DH groups fail with newer openssl

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Open
    • Icon: Medium Medium
    • None
    • None
    • IPsec
    • None

    • Build with openssl at least as new as "0x10100000L"

      The code in ikev2_crypto.c within
       
      #if OPENSSL_VERSION_NUMBER >= 0x10100000L
      blocks, is wrong and causes ASSERTS (when enabled) during initial IKE SA exchanges with other ikev2 implementations.

      Fixed by https://gerrit.fd.io/r/19658

            nranns Neale Ranns
            chopps Christian Hopps
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved:

                Estimated:
                Original Estimate - 4 hours
                4h
                Remaining:
                0m
                Logged:
                Time Not Required
                Not Specified