On 09/10/2014 02:48 PM, Martin Willi wrote:
Hi,
IKE_SA_INIT request with major version 3 is sent, charon log shows that
the header verification failed
Sep 8 11:40:01 01[ENC] header verification failed
Sep 8 11:40:01 01[NET] received invalid IKE header from 2001:db8:f:1::1
Looks like we are a little to strict in verifying the sanity of exchange
types for the different IKE versions. I've tried to address this, please
try the patch available at [1].
Regards
Martin
[1]http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=1915ef24
Applied this patch and receiving INFORMATION response instead of
IKE_SA_INIT response.
Sep 10 05:07:21 10[ENC] parsed a IKE_SA_INIT request header
Sep 10 05:07:21 10[ENC] added payload of type NOTIFY to message
Sep 10 05:07:21 10[ENC] added payload of type NOTIFY to message
Sep 10 05:07:21 10[ENC] generating INFORMATIONAL response 0 [
N(INVAL_MAJOR) ]
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users
