Hi Igor,

> invalid CPI length in IPCOMP proposal

We currently assert that the length is two bytes.  But it seems we are a
bit too restrictive.  While the 16-bit CPI values SHOULD be sent in two
bytes according to RFC 3173, a responder MUST be able to accept them as
four byte values.

Please try the patch in the ipcomp-spi-len branch [1].

Regards,
Tobias

[1] http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=2ecf21e01

_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to