1 2To test tcp-md5 do: 3 4* compile and install kernel with TCP_SIGNATURE support 5 6* add this to /etc/ipsec.conf (the md5 'secret' is just a sample) 7 add 127.0.0.1 127.0.0.1 tcp 0x1000 -A tcp-md5 "0e3a9ac42ceca8260f1d6fbc46a9707c"; 8 9* enable it in /etc/rc.conf with 10 ipsec_enable="YES" 11 and apply it with sh /etc/rc.d/ipsec start 12 13 [ off course you can also manually add it using setkey(8) ] 14 15* compile tcpconnect in here running: 16 make 17 18* start tcpdump (secret as above, port is just a sample): 19 tcpdump -l -n -i lo0 -s 0 -M "0e3a9ac42ceca8260f1d6fbc46a9707c" tcp and port 2345 20 21* run the server (use same port as given to tcpdump): 22 ./tcpconnect server 2345 23 24* run the client (use same port as given to tcpdump): 25 ./tcpconnect client 127.0.0.1 2345 1 tcpmd5 26 27* check tcpdump output 28 29# end 30