Bug in freeswan-0.8's replay is on for hand keyed SA's

  Well the subject line says it all really. I had noticed that the MANUAL flag had stopped showing up in /proc/net/ipsec-spi a while back but thought it did not matter much, turns out it does.   I am running some more tests to be sure, so far I find that I have to reboot both my testing machines at the same time or else I have to wait for the packets to catch up to the replay counter.   I am using "esp 3des-md5-96" with freeswan-0.8 currently.   I think this is a real bug that keeps the 0.8 from being all that useful.

		||ugh Daniel
		hugh@toad.com
			Systems Testing & Project mis-Management
			The Linux FreeS/WAN Project
			
http://www.xs4all.nl/~freeswan