[Bug 913935] Re: racoon segfaults when flusing SPD
I can confirm this. racoon is running as an unprivileged user and dying with the following error messages after a while (I do not have to run spdflush for this to happen): Sep 11 15:28:23 racoon: ERROR: failed to get sainfo. Sep 11 15:28:23 racoon: ERROR: failed to get sainfo. Sep 11 15:28:23 racoon: [xx.xx.xx.xx] ERROR: failed to pre-process ph2 packet (side: 1, status: 1). Sep 11 15:28:23 racoon: ERROR: privsep_socket: unauthorized domain (15) Sep 11 15:28:23 kernel: [59417.050147] show_signal_msg: 57 callbacks suppressed Sep 11 15:28:23 kernel: [59417.050158] racoon[2166]: segfault at 10 ip 7fd415fa0018 sp 74ba3eb0 error 4 in racoon[7fd415f77000+92000] Note that this happened after racoon was successfully running for a few hours. This never happened with racoon version 0.7.3. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
-- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
Here is my racoon configuration (remote IP obfuscated) :
$ cat /etc/racoon/racoon.conf
privsep
{
user "racoon";
group "racoon";
}
log notify;
path certificate "/etc/racoon/certs";
path script "/etc/racoon/scripts";
remote 1.2.3.4 {
exchange_mode main;
nat_traversal on;
certificate_type plain_rsa "/etc/racoon/local-key/sdeziel-laptop";
peers_certfile plain_rsa "/etc/racoon/remote-key/sdeziel-fw.pub";
peers_identifier fqdn "sdeziel-fw";
my_identifier fqdn "sdeziel-laptop";
verify_cert off;
proposal {
encryption_algorithm aes;
hash_algorithm sha1;
authentication_method rsasig;
dh_group modp2048;
}
}
sainfo anonymous {
pfs_group modp2048;
encryption_algorithm aes;
authentication_algorithm hmac_sha1;
compression_algorithm deflate;
}
Note that the remote peer receives the SA deletion message even if
racoon crashes.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to ipsec-tools in Ubuntu.
https://bugs.launchpad.net/bugs/913935
Title:
racoon segfaults when flusing SPD
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
Thank you for taking the time to report this bug and helping to make Ubuntu better. Please try to obtain a backtrace following the instructions at http://wiki.ubuntu.com/DebuggingProgramCrash and upload the backtrace (as an attachment) to the bug report. This will greatly help us in tracking down your problem. ** Changed in: ipsec-tools (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
@Dave, here is the backtrace. FYI, the crash only happens in the separated unprivileged process. The crash does not occur when running with root. ** Attachment added: "Racoon's unprivileged process backtrace" https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+attachment/2665154/+files/gdb-racoon-lp913935.txt -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
[Expired for ipsec-tools (Ubuntu) because there has been no activity for 60 days.] ** Changed in: ipsec-tools (Ubuntu) Status: Incomplete => Expired -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
Please, let me know if the backtrace is not enough. ** Changed in: ipsec-tools (Ubuntu) Status: Expired => Confirmed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
** Bug watch added: Debian Bug tracker #679482 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=679482 ** Also affects: ipsec-tools (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=679482 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
** Changed in: ipsec-tools (Debian) Status: Unknown => Confirmed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
