> Synopsis: [ipsec] SP refcnt increases with each packet in ipv6 with new IPSEC
>
> Wait for feedback if the patch presented is fine.
>
> http://www.freebsd.org/cgi/query-pr.cgi?pr=121374
Ok, I've tested this patch. Exchanging packets through a policy works
after a fashion, but after sending on
> > Is there a known problem running ah+esp on ip6? I can set up an
> > association and run ah+esp just fine on ip4,
> > and ah or esp work well by themselves in ip6, but I've had no luck
> > with combining them on ip6.
>
> 22 is EINVAL.
>
> The same error message is there twice in sys/netin
Is there a known problem running ah+esp on ip6? I can set up an
association and run ah+esp just fine on ip4,
and ah or esp work well by themselves in ip6, but I've had no luck
with combining them on ip6.
I know that ipcomp is documented to be broken but I haven't seen
anything about this problem.