Package: ipsec-tools Version: 1:0.7.3-12 Severity: normal Setkey rejects 288-bit keys (256 for AES, 32 for nonce) for AES-CTR as being too long. This is a problem with the kernel, but it made more sense to file it against this package, since it would only ever be noticed when using setkey.
It has been fixed as of the 3.0.3-stable kernel release upstream. Here is the patch: https://lkml.org/lkml/2011/8/14/188 -- System Information: Debian Release: 6.0.2 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/dash Versions of packages ipsec-tools depends on: ii libc6 2.11.2-10 Embedded GNU C Library: Shared lib ii libcomerr2 1.41.12-4stable1 common error description library ii libgssapi-krb5-2 1.8.3+dfsg-4squeeze1 MIT Kerberos runtime libraries - k ii libk5crypto3 1.8.3+dfsg-4squeeze1 MIT Kerberos runtime libraries - C ii libkrb5-3 1.8.3+dfsg-4squeeze1 MIT Kerberos runtime libraries ii libpam0g 1.1.1-6.1 Pluggable Authentication Modules l ii libssl0.9.8 0.9.8o-4squeeze2 SSL shared libraries ipsec-tools recommends no packages. ipsec-tools suggests no packages. -- Configuration Files: /etc/ipsec-tools.conf [Errno 13] Permission denied: u'/etc/ipsec-tools.conf' -- no debconf information -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
