RPD crashes when enabling keychain with the following (new) algorithms, while using basic option

hmac-sha2-224 Hash-based message authentication code (SHA2-224)

hmac-sha2-256 Hash-based message authentication code (SHA2-256)

hmac-sha2-384 Hash-based message authentication code (SHA2-384)

hmac-sha2-512 Hash-based message authentication code (SHA2-512)

Issue is solved using “option isis-enhanced”.

labroot@shun-re0> show system core-dumps 
/var/crash/*core*: No such file or directory
-rw-rw----  1 root  wheel   11121784 Sep 26 05:16 /var/tmp/rpd.core-tarball.0.tgz
-rw-rw----  1 root  wheel   10776603 Sep 26 05:16 /var/tmp/rpd.core-tarball.1.tgz
-rw-rw----  1 root  wheel   10920979 Sep 26 05:16 /var/tmp/rpd.core-tarball.2.tgz
-rw-rw----  1 root  wheel   10951654 Sep 26 05:16 /var/tmp/rpd.core-tarball.3.tgz
-rw-rw----  1 root  wheel   10950582 Sep 26 05:17 /var/tmp/rpd.core-tarball.4.tgz

As per feature support, for the new algorithms (SHA2-224, SHA2-256, SHA2-384 and SHA2-512), only option "isis-enhanced" is supported. 

However to avoid core, commit check is added to restrict configuring option as basic for these algorithms.

https://prsearch.juniper.net/problemreport/PR1839917

Fix:

labroot@shun-re0# set security authentication-key-chains key-chain ISIS_Chain key 0 algorithm hmac-sha2-224 

[edit]

labroot@shun-re0# set security authentication-key-chains key-chain ISIS_Chain key 0 options basic 

[edit]

labroot@shun-re0# commit 

[edit security authentication-key-chains]

 'key-chain ISIS_Chain'

  options must be isis-enhanced for key 0

error: configuration check-out failed