LDP
/
LDP
mirror of https://github.com/tLDP/LDP
0
1
Fork 0
Code Releases Activity

Minor fixes triggered by Michel

This commit is contained in:
pbldp 2005-01-15 11:07:33 +00:00
parent 5eed19ef32
commit dea38aca97
2 changed files with 37 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
LDP/users/Peter-Bieringer/Linux+IPv6-HOWTO.lyx
View File

@ -51,6 +51,15 @@ Bieringer
<revhistory>
\layout SGML
<revision> <revnumber>Release 0.48.1</revnumber> <date>2005-01-15</date> <authorin
itials>PB</authorinitials> <revremark>See
\begin_inset LatexCommand \ref[revision history]{revision-history}
\end_inset
for more</revremark></revision>
\layout SGML
<revision> <revnumber>Release 0.48</revnumber> <date>2005-01-11</date> <authorini
tials>PB</authorinitials> <revremark>See
\begin_inset LatexCommand \ref[revision history]{revision-history}
@ -8659,7 +8668,7 @@ Encryption and Authentication
Unlike in IPv4, encryption and authentication is a mandatory feature of
IPv6.
Thesex features are normally implemented using IPsec (which can be also
Those features are normally implemented using IPsec (which can be also
used by IPv4).
\layout Section
@ -8688,11 +8697,15 @@ Tunnel mode
Tunnel mode can be used either for end-to-end or for gateway-to-gateway
connection modes.
Here, the complete IP packet is being encrypted and gets a new IP header
prepended .
prepended, all together constituing a new IP packet (this mechanism is
also known as "encapsulation")
\layout Standard
This mode usually decreases the MTU by 40 octets from the MTU of transport
mode.
I.e.
using AES-128 for encryption and SHA1 for authentication 82 octets less
than the normal MTU.
\layout Section
Support in kernel (ESP and AH)
@ -8701,7 +8714,7 @@ Support in kernel (ESP and AH)
Support in vanilla Linux kernel 2.4.x
\layout Standard
Currently missing in vanilla 2.4.
At the time of writing missing in vanilla up to 2.4.28.
There was an issue about keeping the Linux kernel source free of export/import-
control-laws regarding encryption code.
This is also one case why
@ -8710,6 +8723,7 @@ control-laws regarding encryption code.
\end_inset
wasn't included in vanilla source.
Perhaps a backport from 2.6.x will be done in the future.
\layout Subsection
Support in vanilla Linux kernel 2.6.x
@ -15524,6 +15538,9 @@ Versions x.y.z are work-in-progress and published as LyX and SGML file on
Releases 0.x
\layout Description
0.48.1 2005-01-15/PB: minor fixes
\layout Description
0.48 2005-01-11/PB: grammar check and minor review of IPv6 IPsec section
\layout Description

22
LDP/users/Peter-Bieringer/Linux+IPv6-HOWTO.sgml
View File

@ -29,6 +29,9 @@ Bieringer
<revhistory>
<revision> <revnumber>Release 0.48.1</revnumber> <date>2005-01-15</date> <authorinitials>PB</authorinitials> <revremark>See <link linkend="revision-history">revision history</link> for more</revremark></revision>
<revision> <revnumber>Release 0.48</revnumber> <date>2005-01-11</date> <authorinitials>PB</authorinitials> <revremark>See <link linkend="revision-history">revision history</link> for more</revremark></revision>
@ -63,7 +66,7 @@ The goal of the Linux IPv6 HOWTO is to answer both basic and advanced questions
General
</title>
<remark>
CVS-ID: &dollar;Id: Linux+IPv6-HOWTO.lyx,v 1.99 2005/01/01 21:41:14 pbldp Exp &dollar;
CVS-ID: &dollar;Id: Linux+IPv6-HOWTO.lyx,v 1.100 2005/01/11 19:24:29 pbldp Exp &dollar;
</remark>
<para>
Information about available translations you will find in section <link linkend="general-translations">Translations</link>.
@ -7475,7 +7478,7 @@ Info: More detailed information concerning IPv6 Security can be found here:
Encryption and Authentication
</title>
<para>
Unlike in IPv4, encryption and authentication is a mandatory feature of IPv6. Thesex features are normally implemented using IPsec (which can be also used by IPv4).
Unlike in IPv4, encryption and authentication is a mandatory feature of IPv6. Those features are normally implemented using IPsec (which can be also used by IPv4).
</para>
<sect1>
<title>
@ -7502,10 +7505,10 @@ Using AES-128 for encryption and SHA1 for authentication, this mode decreases th
Tunnel mode
</title>
<para>
Tunnel mode can be used either for end-to-end or for gateway-to-gateway connection modes. Here, the complete IP packet is being encrypted and gets a new IP header prepended .
Tunnel mode can be used either for end-to-end or for gateway-to-gateway connection modes. Here, the complete IP packet is being encrypted and gets a new IP header prepended, all together constituing a new IP packet (this mechanism is also known as &quot;encapsulation&quot;)
</para>
<para>
This mode usually decreases the MTU by 40 octets from the MTU of transport mode.
This mode usually decreases the MTU by 40 octets from the MTU of transport mode. I.e. using AES-128 for encryption and SHA1 for authentication 82 octets less than the normal MTU.
</para>
</sect2>
@ -7522,7 +7525,7 @@ Support in kernel (ESP and AH)
Support in vanilla Linux kernel 2.4.x
</title>
<para>
Currently missing in vanilla 2.4. There was an issue about keeping the Linux kernel source free of export/import-control-laws regarding encryption code. This is also one case why <ulink url="http://www.freeswan.org/">FreeS/WAN project</ulink> wasn't included in vanilla source.
At the time of writing missing in vanilla up to 2.4.28. There was an issue about keeping the Linux kernel source free of export/import-control-laws regarding encryption code. This is also one case why <ulink url="http://www.freeswan.org/">FreeS/WAN project</ulink> wasn't included in vanilla source. Perhaps a backport from 2.6.x will be done in the future.
</para>
</sect2>
@ -12117,6 +12120,15 @@ Releases 0.x
<variablelist>
<varlistentry>
<term>
0.48.1
</term><listitem><para>2005-01-15/PB: minor fixes
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>
0.48
</term><listitem><para>2005-01-11/PB: grammar check and minor review of IPv6 IPsec section
</para>