Skip to content

Commit 396a631

Browse files
committed
arm64: kernel 5.15: enable TCP_MD5SIG
For BGP TCP MD5 authentication to work, the appropriate support needs to be enabled in the kernel, so enable it. Fixes errors from FRR's bgpd like: Jul 19 12:29:43 localhost bgpd[954]: [KTTWK-0CPJ7][EC 100663303] sockopt_tcp_signature: setsockopt(22): Protocol not available Jul 19 12:29:43 localhost bgpd[954]: [NWGVJ-FEW9F][EC 33554495] Unable to set TCP MD5 option on socket for peer 10.0.1.2 (sock=22): Protocol not available Jul 19 12:29:43 localhost bgpd[954]: [KTTWK-0CPJ7][EC 100663303] sockopt_tcp_signature: setsockopt(22): Protocol not available Jul 19 12:29:43 localhost bgpd[954]: [NWGVJ-FEW9F][EC 33554495] Unable to set TCP MD5 option on socket for peer 10.0.0.2 (sock=22): Protocol not available Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
1 parent 19cc991 commit 396a631

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

packages/base/any/kernels/5.15-lts/configs/arm64-all/arm64-all.config

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -967,7 +967,7 @@ CONFIG_INET_TCP_DIAG=y
967967
# CONFIG_TCP_CONG_ADVANCED is not set
968968
CONFIG_TCP_CONG_CUBIC=y
969969
CONFIG_DEFAULT_TCP_CONG="cubic"
970-
# CONFIG_TCP_MD5SIG is not set
970+
CONFIG_TCP_MD5SIG=y
971971
CONFIG_IPV6=y
972972
# CONFIG_IPV6_ROUTER_PREF is not set
973973
# CONFIG_IPV6_OPTIMISTIC_DAD is not set

0 commit comments

Comments
 (0)