<div dir="ltr"><div>hi all,</div>
<div> </div>
<div>Do anyone find that strongswan 4.6.4 will suddenly kill itself and
restart?</div>
<div> </div>
<div>I have used strongswan 4.5.2 for a long time and find it work fine.
Recently I update to stongswan 4.6.4 and it seems good at the beginning.But
recently it often restart by itseft with the following messages in
/var/log/messages:</div>
<div>========================================================================================================</div>
<div>
<div>Apr 1 08:51:58 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 131[IKE] received DELETE for ESP CHILD_SA with SPI 0b49e974 </div>
<div>Apr 1 08:51:58 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 520[ENC] generating INFORMATIONAL response 2 [ D ] </div>
<div>Apr 1 08:51:58 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 520[NET] sending packet: from 10.2.0.5[500] to 10.0.40.216[500] </div>
<div>Apr 1 08:51:58 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 520[NET] received packet: from 10.0.40.45[500] to 10.2.0.5[500] </div>
<div>Apr 1 08:51:58 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 520[ENC] parsed INFORMATIONAL request 2 [ D ] </div>
<div>Apr 1 08:51:58 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 520[IKE] received DELETE for ESP CHILD_SA with SPI 0b49ed28 </div>
<div> </div>
<div> </div>
<div> </div>
<div>Apr 1 08:51:58 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 603[DMN] thread 603 received 10</div>
<div>Apr 1 08:51:58 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 603[DMN] killing ourself, received critical signal </div>
<div>Apr 1 08:51:58 (none) authpriv.warn ipsec_starter[11658]: charon has died -- restart scheduled (5sec)</div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[DMN] Starting IKEv2 charon daemon (strongSwan 4.6.4) </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[CFG] loading ca certificates from '/tmp/lib/etc/ipsec.d/cacerts' </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[CFG] loading aa certificates from '/tmp/lib/etc/ipsec.d/aacerts' </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[CFG] loading ocsp signer certificates from '/tmp/lib/etc/ipsec.d/ocspcerts' </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[CFG] loading attribute certificates from '/tmp/lib/etc/ipsec.d/acerts' </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[CFG] loading crls from '/tmp/lib/etc/ipsec.d/crls' </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[CFG] loading secrets from '/tmp/lib/etc/ipsec.secrets' </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[CFG] loaded IKE secret for <a href="mailto:home@debug.strongswan.org" target="_blank">home@debug.strongswan.org</a> </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[CFG] loaded IKE secret for *@<a href="http://debug.strongswan.org" target="_blank">debug.strongswan.org</a> </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[CFG] loaded IKE secret for %any </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[KNL] listening on interfaces: </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[KNL] pow0 </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[KNL] 10.2.0.5 </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[KNL] spi20 </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[KNL] 10.2.6.31 </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[KNL] received netlink error: Invalid argument (22) </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[KNL] unable to create IPv4 routing table rule </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[KNL] received netlink error: Invalid argument (22) </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[KNL] unable to create IPv6 routing table rule </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[NET] could not open socket: Address family not supported by protocol </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[NET] could not open IPv6 socket, IPv6 disabled </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[CFG] HA config misses local/remote address </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[LIB] plugin 'ha': failed to load - ha_plugin_create returned NULL </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[DMN] loaded plugins: openssl random x509 pubkey hmac xcbc stroke kernel-pfkey kernel-netlink eap-radius socket-default dhcp </div>
<div>Apr 1 08:52:03 (none) <a href="http://daemon.info" target="_blank">daemon.info</a> charon: 00[JOB] spawning 1000 worker threads </div>
<div>Apr 1 08:52:03 (none) authpriv.warn ipsec_starter[11658]: charon (6278) started after 20 ms</div></div>
<div>=================================================================================================================</div>
<div>The dameon modules of charon said it receive the signal 10 and kill itself.
I check usage of linux signal in the manual of linux, and find that signal 10
means SIGBUS because of bad memory access. </div><div><br></div><div><br></div>
<div>Is it a bug in strongswan 4.6.4 ?</div>
<div>How to fix it?</div>
<div> </div>
<hr style="WIDTH:210px;min-height:1px" align="left" color="#b5c4df" size="1">
<div><span>lijianrong</span></div>
</div>