tinc - Jun 2001 - Loosing Connections with tinc pre4 after Regenerating symmetric key

I have used tinc pre3 for over 6 month successfully with several
networks.

After upgrading to tinc pre4 I recognized, that the connection ist lost
after 1 hour. So I changed the KeyExpire = 900 and the connection lost
after 15min.

Debugging with tcpdump shows me, that the packets are still send, but
the tincd, that requested the key change seems to have problems to
forward the packets (internal routing is gone?). 

Entering tincd -k helps, but this is no solution.

Can anybody help?

The system is debian 2.2 potato, kernel version 2.2.19.

Flynn

-
Tinc:         Discussion list about the tinc VPN daemon
Archive:      http://mail.nl.linux.org/lists/
Tinc site:    http://tinc.nl.linux.org/

I had the same problem yestarday after upgraded to pre4 but had no time to
investigate it. I used the same config files as in pre3.
Any help is welcomed by me too :)

Kosta Galabov
System administrator
www.visia.com

-----Original Message-----
From: owner-tinc@nl.linux.org [mailto:owner-tinc@nl.linux.org]On Behalf
Of Flynn Marquardt
Sent: Wednesday, June 20, 2001 16:21
To: tinc@nl.linux.org
Subject: Loosing Connections with tinc pre4 after Regenerating symmetric
key


I have used tinc pre3 for over 6 month successfully with several
networks.

After upgrading to tinc pre4 I recognized, that the connection ist lost
after 1 hour. So I changed the KeyExpire = 900 and the connection lost
after 15min.

Debugging with tcpdump shows me, that the packets are still send, but
the tincd, that requested the key change seems to have problems to
forward the packets (internal routing is gone?).

Entering tincd -k helps, but this is no solution.

Can anybody help?

The system is debian 2.2 potato, kernel version 2.2.19.

Flynn

-
Tinc:         Discussion list about the tinc VPN daemon
Archive:      http://mail.nl.linux.org/lists/
Tinc site:    http://tinc.nl.linux.org/

-
Tinc:         Discussion list about the tinc VPN daemon
Archive:      http://mail.nl.linux.org/lists/
Tinc site:    http://tinc.nl.linux.org/

On Wed, Jun 20, 2001 at 03:20:53PM +0200, Flynn Marquardt wrote:
> I have used tinc pre3 for over 6 month successfully with several
> networks.
> 
> After upgrading to tinc pre4 I recognized, that the connection ist lost
> after 1 hour. So I changed the KeyExpire = 900 and the connection lost
> after 15min.
The bug is fixed in the CVS version. The bug only shows up when you have more
than two tinc daemons in one VPN as far as I can tell. I guess that means we
will release pre5 soon.

Thanks for the report!

-- 
Met vriendelijke groet / with kind regards,
  Guus Sliepen <guus@sliepen.warande.net>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
Url :
http://brouwer.uvt.nl/pipermail/tinc/attachments/20010620/c1612b03/attachment.pgp

Guus Sliepen wrote:
> The bug is fixed in the CVS version. The bug only shows up when you have
more
> than two tinc daemons in one VPN as far as I can tell. I guess that means
we
> will release pre5 soon.
I checked it out and all tests, that did not pass, work now. The
problem seems to fixed (it takes more time to be sure). In fact I
usually have at least three tincd in one vpn running.

Thank you for immediate help!

Flynn
-
Tinc:         Discussion list about the tinc VPN daemon
Archive:      http://mail.nl.linux.org/lists/
Tinc site:    http://tinc.nl.linux.org/