enable TCP_MD5SIG in the kernel config

[Andrea Florio]

I'm running Quagga on my raspberry pi. While testing the different features i noted that BGP md5 authentication failed.

2013/05/23 21:49:12 BGP: sockopt_tcp_signature: setsockopt(6): Protocol not available
2013/05/23 21:49:12 BGP: can't set TCP_MD5SIG option on socket 6: Protocol not available

after some investigation i found out that the kernel doesn't support this feature and should be enabled:

from config file i get:

# CONFIG_TCP_MD5SIG is not set

please enable TCP MD5. Debian had this enabled long time ago: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=443742

Best Regards

[peter green (plugwash)]

Please can you confirm what kernel you are using?

[Andrea Florio (andrea-opensuse-org)]

it would be 3.6.11+

root@ROUTER-RASP-BB2 /home/pi # cat /etc/debian_version
7.0
root@ROUTER-RASP-BB2 /home/pi # uname -a
Linux ROUTER-RASP-BB2 3.6.11+ #456 PREEMPT Mon May 20 17:42:15 BST 2013 armv6l GNU/Linux

[peter green (plugwash)]

It sounds like you are using a kernel supplied by either the rasberry pi foundation or a third party, not one supplied by the raspbian project.

Please install the package linux-image-3.6-trunk-rpi and then add the following lines to config.txt

kernel=vmlinuz-3.6-trunk-rpi
initramfs initrd.img-3.6-trunk-rpi followkernel

If the problem remains with a raspbian supplied kernel i'll look into it further.

[Andrea Florio (andrea-opensuse-org)]

Thanks peter...

i use the kernel provided bu the foundation.
I'll try immediately what you suggest.
do you know where is the best place to report this to the foundation?

regards
Andrea

[peter green (plugwash)]

"do you know where is the best place to report this to the foundation?"
I think they use githubs issue tracker for tracking issues with their kernel

https://github.com/raspberrypi/linux

[Andrea Florio (andrea-opensuse-org)]

so.. after installing:

root@ROUTER-RASP-BB2 /home/pi # apt-get install linux-image-3.6-trunk-rpi
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  firmware-linux-free libuuid-perl linux-base
Suggested packages:
  linux-image linux-doc-3.6 debian-kernel-handbook fdutils
The following NEW packages will be installed:
  firmware-linux-free libuuid-perl linux-base linux-image-3.6-trunk-rpi
0 upgraded, 4 newly installed, 0 to remove and 0 not upgraded.
Need to get 10.1 MB of archives.
After this operation, 38.1 MB of additional disk space will be used.
Do you want to continue [Y/n]?

i got an error during installation but it can probably be ignored:

Setting up firmware-linux-free (3.2) ...
update-initramfs: deferring update (trigger activated)
Processing triggers for initramfs-tools ...
ln: failed to create hard link `/boot/initrd.img-3.6-trunk-rpi.dpkg-bak' => `/boot/initrd.img-3.6-trunk-rpi': Operation not permitted
update-initramfs: Generating /boot/initrd.img-3.6-trunk-rpi

i can already see that this should be fixed:

root@ROUTER-RASP-BB2 /boot # cat config-3.6-trunk-rpi | grep TCP_MD5
CONFIG_TCP_MD5SIG=y

i then rebooted the pi, and i see it's working properly now, thanks.