Hi Tobias,

Thank you for the idea, but I'm using version 5.5.1 (see below).
-------------------------------------------------------
root@atm:~# ipsec version
Linux strongSwan U5.5.1/K3.16.0-4-586
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil, Switzerland
See 'ipsec --copyright' for copyright information.
root@atm:~#
-------------------------------------------------------
I compiled it on Debian 8.6 VM, after using the following configuration options: ./configure --prefix=/usr --sysconfdir=/etc --enable-openssl --enable-gmp --enable-charon --enable-stroke --enable-curl --enable-sqlite --enable-agent --enable-gcm

Best regards,
Gyula



On 2016.11.07. 09:35, Tobias Brunner wrote:
Hi Gyula,

Anybody have an idea what could be wrong?
That's due to a recently fixed bug that mapped the aes*gmac keywords
incorrectly for AH proposals.  You may either update to 5.5.1, which
includes the fix, or try to apply the patch at [1] (won't apply cleanly
to any older version as it is based on other changes).

Regards,
Tobias

[1] https://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=a65a282f



--
Gyula Kovács
KKB-Tech
+36 30 257 9319

_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to