[Bug 289367] Re: camellia cipher does not work in racoon - enable camellia in openssl
Sim IJskes
sim at ijskes.org
Mon Sep 5 12:56:05 UTC 2011
Still not arrived in ubuntu natty.
Package: openssl
Versions: 0.9.8o-5ubuntu1
$ openssl ciphers
DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DES-CBC3-MD5:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:RC2-CBC-MD5:RC4-SHA:RC4-MD5:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:DES-CBC-MD5:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC2-CBC-MD5:EXP-RC4-MD5:EXP-RC4-MD5
$ openssl ciphers CAMELLIA
Error in cipher list
25670:error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match:ssl_lib.c:1222:
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/289367
Title:
camellia cipher does not work in racoon - enable camellia in openssl
Status in “ipsec-tools” package in Ubuntu:
Invalid
Status in “openssl” package in Ubuntu:
Confirmed
Status in “openssl” package in Debian:
Fix Released
Bug description:
Binary package hint: racoon
Version 0.7 of ipsec-tools should have added support for the camellia
cipher. Indeed, if you man racoon.conf in Intrepid, you'll see that
camellia has been added for encryption_algorithm under the proposal
and sainfo sections. Unfortunately, trying to enable it is not
working as expected.
I have the camellia kernel module built and loaded (2.6.26).
By changing my encryption_algorithm to "camellia", racoon fails
parsing the config file:
Oct 25 17:58:20 firewall racoon: DEBUG: reading config file /etc/racoon/racoon.conf
Oct 25 17:58:20 firewall racoon: ERROR: /etc/racoon/racoon.conf:21: ";" algorithm mismatched 1
where line 21 is
encryption_algorithm camellia;
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/289367/+subscriptions
More information about the foundations-bugs
mailing list