Hi Andreas,
thanks for your help, but the problem still exists in V4.3.4rc1. I am currently
using
kernel V2.6.27.28.
i will try out the V4.3.3 with the patch ...
kind regards,
Michael
Am Dienstag, 28. Juli 2009 16:00 schrieb Andreas Steffen:
> Hi Michael,
>
> due to the additional keywords introduced for the Multiple
> Authentication Exchanges with the strongSwan 4.3 branch,
> the KW_END_FIRST..KW_END_LAST range did not map to the KW_LEFT
> and KW_RIGHT ranges any more. This bug has been fixed with the
> following patch:
>
> http://wiki.strongswan.org/repositories/diff/strongswan?rev=ecff28c5c5721008954be93adf2ce51a35edcb4c
>
> Could you test the 4.3.4rc1 release candidate?
>
> http://download.strongswan.org/strongswan-4.3.4rc1.tar.bz2
>
> Regards
>
> Andreas
>
> Michael Niehren wrote:
> > Hi again,
> >
> > i've debugged the problem a lot more (it's still in V4.3.3). The cause
> > seem's to come from the definition
> > of the starter_end struct (confread.h).
> >
> > The function starter_cmp_end always returns FALSE because the function
> > cmp_args(KW_END_FIRST, KW_END_LAST, (char *)c1, (char *)c2);
> > always returns FALSE.
> >
> > The only difference between V4.2.16 (where the problem not occurs)and
> > V4.3.3 there is the definition
> > of the starter_end struct that is compared in the line
> > cmp_args(KW_END_FIRST, KW_END_LAST, (char *)c1, (char *)c2);
> >
> > Could someone of the developers take an eye on that ?
> >
> > kind regards,
> > Michael
> >
> >
> > Am Donnerstag, 4. Juni 2009 15:00 schrieb Michael Niehren:
> >> Hi together,
> >>
> >> Subject says it all. I have configured 1 connection in the ipsec.conf and
> >> the
> >> connections comes up after start. But if i call
> >> ipsec update
> >> the connection will be deleted and is started again. And i could not find
> >> a
> >> reason for that, config is the same. Is it not possible to add an
> >> connection
> >> without deleting other running connections ?
> >>
> >> hope someone could help me
> >> Michael
> >>
> >>
> >> I am using StrongSWan V4.3.1 and here is my ipsec.conf
> >>
> >> ---
> >> config setup
> >> nat_traversal=yes
> >>
> >> conn %default
> >> authby=rsasig
> >> keyingtries=1
> >> keylife=20m
> >> ikelifetime=240m
> >> left=%defaultroute
> >> leftcert=public_tuxvpnrobo.tuxgreen.de.pem
> >> leftupdown=/etc/ipsec.d/scripts/updown.tux
> >> esp=aes256,aes192,aes128,3des
> >> ike=aes256,aes192,aes128,3des
> >> auto=start
> >> dpdaction=clear
> >>
> >> conn robovpntest
> >> leftsubnet=192.168.23.0/24
> >> right=217.11.60.3
> >> rightsubnet=10.89.0.0/24
> >> rightcert=public_okawango.tuxgreen.de.pem
>
> ==
> Andreas Steffen andreas.stef...@strongswan.org
> strongSwan - the Linux VPN Solution!www.strongswan.org
>
> Institute for Internet Technologies and Applications
> University of Applied Sciences Rapperswil
> CH-8640 Rapperswil (Switzerland)
> ===[ITA-HSR]==
>
> ___
> Users mailing list
> Users@lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users
>
>
--
Michael Niehren __ _ powered by
/ / (_)__ __ __
/ /__/ / _ \/ // /\ \/ /
//_/_//_/\_,_/ /_/\_\
___
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users
