** Changed in: strongswan (Ubuntu)
       Status: Incomplete => Invalid

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1828035

Title:
  StrongSwan with GCM and large packet sizes produces unstable behavior

Status in Ubuntu on IBM z Systems:
  Fix Released
Status in linux package in Ubuntu:
  Fix Released
Status in strongswan package in Ubuntu:
  Invalid

Bug description:
  StrongSwan with GCM and large packet sizes produces unstable behavior when 
used in Linux native environment. 
   
  ---uname output---
  Linux ubu01 4.15.0-42-generic #45-Ubuntu SMP Thu Nov 15 19:29:11 UTC 2018 
s390x s390x s390x GNU/Linux
   
  Machine Type = 3906 / M04 (z14), LPAR (dedicated) 
   
  ---Debugger---
  A debugger is not configured
   
  ---Steps to Reproduce---
  On two separate machines (Linux native), install StrongSwan and on both 
machines, configure the encryption with aes128gcm8 for IPsec.

  Then run the following command from one of the machine:

  ```
  $# ping <other_machine_ip> -s 1024
  ```

  Small packet sizes are working as expected. However, anything large (around 
1024 bytes or more) are sometimes returning wrong values, or the packets are 
getting lost. This problem does not occur for ciphers not involving GCM. 
   
  Userspace tool common name: StrongSwan 
   
  The userspace tool has the following bit modes: both 

  Userspace package: StrongSwan

  Userspace tool obtained from project website:  na 
   
  -Attach ltrace and strace of userspace application.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1828035/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to