(racoon 34) Re: racoon + setkey for Linux -- cvs access / forking?

[Derek Atkins <derek@ihtfp.com>]

Hi,

Thank you very much for your reply.  May I ask who else is involved in
porting racoon to Linux?  I would like to try to work with them as I
move forward in my implementation of NAT-T (and maybe XAUTH).

Based on your answers below I plan to pull down libipsec, racoon, and
setkey from kame and "import" into my own CVS tree.  Even with this
decision I would like to work with the existing linux porters -- they
may already have a linux-racoon CVS tree set up somewhere.

Thank you again for your help.

-derek

Shoichi Sakane <sakane@tanu.org> writes:

> hi, Derek.  i'm a core developper of racoon.
> i've heard your opinion from Itojun.  so here is my opinion.
> 
> > I've become involved in the new Linux-IPsec work and they are using
> > KAME's racoon and setkey implementation for their user-space keying
> > daemon applications.  In addition to some linux-specific porting and
> > packaging issues, I plan to work on adding some features like NAT-T
> > and (perhaps) XAUTH support.
> > 
> > So, I had a few questions for you:
> > 
> >    0) is anyone currently working on NAT-T or XAUTH support for racoon?
> 
> no one works to implement both of features as far as i know.
> 
> > if not, then..
> > 
> >    1) would you want these changes to be merged into the KAME mainline?
> 
> i could merge it.  please send me the patch and the instruction.
> 
> >    2) could I gain access to the KAME CVS (or should I run my own CVS?)
> >    3) if I can use KAME CVS, could I get a Linux branch?
> 
> you can get the full source of racoon as well as the whole kame source
> from the kame repository.  however you can not gain fully access to the
> kame repository.
> 
> i'm not sure it's better way that we will develop racoon as the kame stack
> because racoon is not only for the kame stack, but also for the linux stack
> in future.  actually i have had two guys to develop racoon for the linux
> stack.  so we might be better to make an independent line, for example
> the source forge.  then you could gain fully access to the racoon
> repository.
> 

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available