Re: ifup-ipsec: Manual v. Automatic keying

[Bojan Smojver <bojan rexursive com>]

Bojan Smojver <bojan <at> rexursive.com> writes:

> FC5, that I'm using for my IPSec to PIX connection, is similar to devel
> (i.e. it has the AH bits in spdadd). Anyone on the list knows why the
> discrepancy?

Possibly related bug:

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150094

My understanding is that with automatic keying, it is racoon that handles the AH
bit. Can anyone confirm this?

--
Bojan