From 37f5075a2b78445021d765b727ecac002714cd14 Mon Sep 17 00:00:00 2001 From: Jonas Gorski Date: Wed, 19 Jul 2023 15:11:53 +0200 Subject: [PATCH] arm64: kernel 5.15: enable TCP_MD5SIG For BGP TCP MD5 authentication to work, the appropriate support needs to be enabled in the kernel, so enable it. Fixes errors from FRR's bgpd like: Jul 19 12:29:43 localhost bgpd[954]: [KTTWK-0CPJ7][EC 100663303] sockopt_tcp_signature: setsockopt(22): Protocol not available Jul 19 12:29:43 localhost bgpd[954]: [NWGVJ-FEW9F][EC 33554495] Unable to set TCP MD5 option on socket for peer 10.0.1.2 (sock=22): Protocol not available Jul 19 12:29:43 localhost bgpd[954]: [KTTWK-0CPJ7][EC 100663303] sockopt_tcp_signature: setsockopt(22): Protocol not available Jul 19 12:29:43 localhost bgpd[954]: [NWGVJ-FEW9F][EC 33554495] Unable to set TCP MD5 option on socket for peer 10.0.0.2 (sock=22): Protocol not available Signed-off-by: Jonas Gorski --- .../any/kernels/5.15-lts/configs/arm64-all/arm64-all.config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/base/any/kernels/5.15-lts/configs/arm64-all/arm64-all.config b/packages/base/any/kernels/5.15-lts/configs/arm64-all/arm64-all.config index e89887ae1..775d97371 100644 --- a/packages/base/any/kernels/5.15-lts/configs/arm64-all/arm64-all.config +++ b/packages/base/any/kernels/5.15-lts/configs/arm64-all/arm64-all.config @@ -967,7 +967,7 @@ CONFIG_INET_TCP_DIAG=y # CONFIG_TCP_CONG_ADVANCED is not set CONFIG_TCP_CONG_CUBIC=y CONFIG_DEFAULT_TCP_CONG="cubic" -# CONFIG_TCP_MD5SIG is not set +CONFIG_TCP_MD5SIG=y CONFIG_IPV6=y # CONFIG_IPV6_ROUTER_PREF is not set # CONFIG_IPV6_OPTIMISTIC_DAD is not set