search for: plutodebug

Hi List, i found a Problem with the CentOS RPM for OpenSwan exactly its the Version: openswan.i386 2.6.14-1.el5_3.2 . If you set the Pluto Debug-Level in the ipsec.conf to "all" (Exactly the line looks like this" plutodebug="all" ") and now a client connect to the Server the Ipsec gets an Segmentation Fault and is killed. We Authenticate our clients with x509 Certificates. The Ipsec ist also killed when a client dosent own a valid Certificate. The Problem occured also on an 64bit System. Mit freundlic...

...il.com>: > On 02/09/2016 07:04 AM, John Cenile wrote: > >> does anyone have any suggestions on what the problem might be? >> > > Not off the top of my head, but if I were you, I'd enable debugging of > "control" and "dpd". See man ipsec.conf (/plutodebug) and man ipsec_pluto. > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > https://lists.centos.org/mailman/listinfo/centos >

...> > > > > >> does anyone have any suggestions on what the problem might be? > > >> > > > > > > Not off the top of my head, but if I were you, I'd enable debugging of > > > "control" and "dpd". See man ipsec.conf (/plutodebug) and man > > ipsec_pluto. > > > > > > _______________________________________________ > > > CentOS mailing list > > > CentOS at centos.org > > > https://lists.centos.org/mailman/listinfo/centos > > > > > _____________________________...

Hello, I'm cross posting this from the OpenSwan mailing list, in case someone here can help. We have two sites connected via OpenSwan 2.6.32-9 on CentOS 5, sharing 6 /24 subnets each (so 12 in total). The problem we're having is completely randomly, be it in the middle of the day, or in the middle of the night (so I don't believe it's traffic related), certain (and sometimes

On 02/09/2016 07:04 AM, John Cenile wrote: > does anyone have any suggestions on what the problem might be? Not off the top of my head, but if I were you, I'd enable debugging of "control" and "dpd". See man ipsec.conf (/plutodebug) and man ipsec_pluto.

...6 07:04 AM, John Cenile wrote: > > > >> does anyone have any suggestions on what the problem might be? > >> > > > > Not off the top of my head, but if I were you, I'd enable debugging of > > "control" and "dpd". See man ipsec.conf (/plutodebug) and man > ipsec_pluto. > > > > _______________________________________________ > > CentOS mailing list > > CentOS at centos.org > > https://lists.centos.org/mailman/listinfo/centos > > > _______________________________________________ > CentOS mailing l...

...000test:~# cat /etc/ipsec.conf # /etc/ipsec.conf - Openswan IPsec configuration file version 2.0 # conforms to second version of ipsec.conf specification config setup # Debug-logging controls: "none" for (almost) none, "all" for lots. klipsdebug=none plutodebug=none interfaces=%defaultroute uniqueids=yes # Add connections here conn GDC1 authby=secret auto=start left=%defaultroute leftsourceip=192.168.1.97 leftid=@rx1000test leftsubnet=192.168.1.96/28 ike=aes128-md5-modp1024 esp=...

...n the strongSwan log? > > Andreas > > BTW - is the Linksys router running a FreeS/WAN or Openswan clone? > > Philipp Rusch wrote: >> Hi Andreas, >> >> this is a harder thing than I thought ... >> >> - switched to AES256 on both sides now >> - plutodebug=all >> - Log from Linksys-Router: >> 002 [Thu 16:18:21] added connection description "TunnelA" >> 003 [Thu 16:18:21] "TunnelA" #92: initiating Main Mode >> 004 [Thu 16:18:21] "TunnelA" #92: [WRV200 Response:] ISAKMP SA >> (Main M...

...>> does anyone have any suggestions on what the problem might be? > > > >> > > > > > > > > Not off the top of my head, but if I were you, I'd enable debugging > of > > > > "control" and "dpd". See man ipsec.conf (/plutodebug) and man > > > ipsec_pluto. > > > > > > > > _______________________________________________ > > > > CentOS mailing list > > > > CentOS at centos.org > > > > https://lists.centos.org/mailman/listinfo/centos > > > > >...

...conforms to second version of ipsec.conf specification # /etc/ipsec.conf - FreeS/WAN IPSEC configuration file # More elaborate and more varied sample configurations can be found # in doc/examples. # basic configuration config setup interfaces="ipsec0=ppp0" klipsdebug=none plutodebug=none conn %default authby=rsasig leftrsasigkey=%cert rightrsasigkey=%cert conn roadwarrior compress=no left=xxxxxx.dnsalias.org lefsubnet=192.168.1.0/24 leftcert=chivas.hectordenis.net.pem pfs=yes right=%any auto=add ******************************************************************...