[Bug 913935] Re: racoon segfaults when flusing SPD
I can confirm this. racoon is running as an unprivileged user and dying with the following error messages after a while (I do not have to run spdflush for this to happen): Sep 11 15:28:23 racoon: ERROR: failed to get sainfo. Sep 11 15:28:23 racoon: ERROR: failed to get sainfo. Sep 11 15:28:23 racoon: [xx.xx.xx.xx] ERROR: failed to pre-process ph2 packet (side: 1, status: 1). Sep 11 15:28:23 racoon: ERROR: privsep_socket: unauthorized domain (15) Sep 11 15:28:23 kernel: [59417.050147] show_signal_msg: 57 callbacks suppressed Sep 11 15:28:23 kernel: [59417.050158] racoon[2166]: segfault at 10 ip 7fd415fa0018 sp 74ba3eb0 error 4 in racoon[7fd415f77000+92000] Note that this happened after racoon was successfully running for a few hours. This never happened with racoon version 0.7.3. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
-- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
Here is my racoon configuration (remote IP obfuscated) : $ cat /etc/racoon/racoon.conf privsep { user "racoon"; group "racoon"; } log notify; path certificate "/etc/racoon/certs"; path script "/etc/racoon/scripts"; remote 1.2.3.4 { exchange_mode main; nat_traversal on; certificate_type plain_rsa "/etc/racoon/local-key/sdeziel-laptop"; peers_certfile plain_rsa "/etc/racoon/remote-key/sdeziel-fw.pub"; peers_identifier fqdn "sdeziel-fw"; my_identifier fqdn "sdeziel-laptop"; verify_cert off; proposal { encryption_algorithm aes; hash_algorithm sha1; authentication_method rsasig; dh_group modp2048; } } sainfo anonymous { pfs_group modp2048; encryption_algorithm aes; authentication_algorithm hmac_sha1; compression_algorithm deflate; } Note that the remote peer receives the SA deletion message even if racoon crashes. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
Thank you for taking the time to report this bug and helping to make Ubuntu better. Please try to obtain a backtrace following the instructions at http://wiki.ubuntu.com/DebuggingProgramCrash and upload the backtrace (as an attachment) to the bug report. This will greatly help us in tracking down your problem. ** Changed in: ipsec-tools (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
@Dave, here is the backtrace. FYI, the crash only happens in the separated unprivileged process. The crash does not occur when running with root. ** Attachment added: "Racoon's unprivileged process backtrace" https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+attachment/2665154/+files/gdb-racoon-lp913935.txt -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
[Expired for ipsec-tools (Ubuntu) because there has been no activity for 60 days.] ** Changed in: ipsec-tools (Ubuntu) Status: Incomplete => Expired -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
Please, let me know if the backtrace is not enough. ** Changed in: ipsec-tools (Ubuntu) Status: Expired => Confirmed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
** Bug watch added: Debian Bug tracker #679482 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=679482 ** Also affects: ipsec-tools (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=679482 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 913935] Re: racoon segfaults when flusing SPD
** Changed in: ipsec-tools (Debian) Status: Unknown => Confirmed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ipsec-tools in Ubuntu. https://bugs.launchpad.net/bugs/913935 Title: racoon segfaults when flusing SPD To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ipsec-tools/+bug/913935/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs