<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Hello,<div><br></div><div>I would be very grateful for hints which will help me stop banging my head on the the keyboard.</div><div><br></div><div>I have just built a new server (Ubuntu 12.04 x64, strongSwan 5.0.4 built from source). It appears to load the configs OK, listcerts etc looks like certs are being loaded, and log messages indicate that the client certs are being accepted, but right after xauth, charon crashes.</div><div><br></div><div>There is a stack frame trace output in the logs:</div><div><br></div><div><div>13[LIB] <x_15|1> /lib/x86_64-linux-gnu/libpthread.so.0 @ 0x7fcbdf8ff000 [0x7fcbdf906e9a]</div><div>13[LIB] <x_15|1> -> ??:0</div><div>13[LIB] <x_15|1> /lib/x86_64-linux-gnu/libc.so.6 @ 0x7fcbdf540000 (clone+0x6d) [0x7fcbdf633ccd]</div><div>13[LIB] <x_15|1> -> ??:0</div><div> dumping 12 stack frame addresses:</div><div> /lib/x86_64-linux-gnu/libpthread.so.0 @ 0x7fcbdf8ff000 [0x7fcbdf90ecb0]</div><div> -> ??:0</div><div> /usr/lib/ipsec/libstrongswan.so.0 @ 0x7fcbdff96000 (is_asn1+0xa4) [0x7fcbdffa5c44]</div><div> -> /root/strongswan-5.0.4/src/libstrongswan/asn1/asn1.c:636</div><div> /usr/lib/ipsec/libstrongswan.so.0 @ 0x7fcbdff96000 (identification_create_from_data+0x47) [0x7fcbdffc17a7]</div><div> -> /root/strongswan-5.0.4/src/libstrongswan/utils/identification.c:1023</div><div> /usr/lib/ipsec/plugins/libstrongswan-xauth-generic.so @ 0x7fcbd65dd000 [0x7fcbd65ddc55]</div><div> -> /root/strongswan-5.0.4/src/libcharon/plugins/xauth_generic/xauth_generic.c:131</div><div> /usr/lib/ipsec/libcharon.so.0 @ 0x7fcbdfb1c000 [0x7fcbdfb6c5a1]</div><div> -> /root/strongswan-5.0.4/src/libcharon/sa/ikev1/tasks/xauth.c:460</div><div> /usr/lib/ipsec/libcharon.so.0 @ 0x7fcbdfb1c000 [0x7fcbdfb63013]</div><div> -> /root/strongswan-5.0.4/src/libcharon/sa/ikev1/task_manager_v1.c:1194</div><div> /usr/lib/ipsec/libcharon.so.0 @ 0x7fcbdfb1c000 [0x7fcbdfb42bcf]</div><div> -> /root/strongswan-5.0.4/src/libcharon/sa/ike_sa.c:1269</div><div> /usr/lib/ipsec/libcharon.so.0 @ 0x7fcbdfb1c000 [0x7fcbdfb3d737]</div><div> -> /root/strongswan-5.0.4/src/libcharon/processing/jobs/process_message_job.c:74</div><div> /usr/lib/ipsec/libstrongswan.so.0 @ 0x7fcbdff96000 [0x7fcbdffba70b]</div><div> -> /root/strongswan-5.0.4/src/libstrongswan/processing/processor.c:219</div><div> /usr/lib/ipsec/libstrongswan.so.0 @ 0x7fcbdff96000 [0x7fcbdffbcb40]</div><div> -> /root/strongswan-5.0.4/src/libstrongswan/threading/thread.c:310</div><div> /lib/x86_64-linux-gnu/libpthread.so.0 @ 0x7fcbdf8ff000 [0x7fcbdf906e9a]</div><div> -> ??:0</div><div> /lib/x86_64-linux-gnu/libc.so.6 @ 0x7fcbdf540000 (clone+0x6d) [0x7fcbdf633ccd]</div><div> -> ??:0</div><div>13[DMN] <x_15|1> killing ourself, received critical signal</div><div>child 10916 (charon) has been killed by sig 6</div></div><div><br></div><div><br></div><div><br></div><div>Config files (they do work at last as far as loading OK -- I may have fat-fingered something when "anonymizing" them though):</div><div><br></div><div>/etc/ipsec.conf</div><div><br></div><div><div>config setup</div><div><br></div><div>ca xca</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>cacert=/etc/ipsec.d/cacerts/x_ca.crt</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>crluri=file:///etc/ipsec.d/crls/x_crl.pem</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>auto=add</div><div><br></div><div>conn x_15</div><div> type=transport</div><div> auto=add</div><div> installpolicy=yes</div><div> keyexchange=ikev1</div><div> authby=xauthrsasig</div><div> xauth=server</div><div> forceencaps=yes</div><div> left=1.2.3.4</div><div> leftsubnet=0.0.0.0/0</div><div><span style="font-size: 12pt; "> leftcert=/etc/ipsec.d/certs/server.com.crt</span></div><div><span style="font-size: 12pt; "> leftid="C=US, ST=x, L=x, O=x, OU=x, CN=server, N=server, E=server@server.com"</span><span class="Apple-tab-span" style="font-size: 12pt; white-space: pre; "> </span></div><div><span class="Apple-tab-span" style="white-space:pre"> </span>rightid="C=US, ST=x, L=x, O=x, OU=x, CN=15, N=15, E=15@x"</div><div> right=%any</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>rightsourceip=172.16.10.80/29</div><div> dpdaction=clear</div><div> dpddelay=5s</div><div> dpdtimeout=30s</div></div><div><br></div><div><br></div><div>/etc/ipsec.secrets:</div><div><br></div><div><div>"C=US, ST=x, L=x, O=x, OU=x, CN=server, N=server, E=server@server.com" : RSA /etc/ipsec.d/private/server.com.key.pem</div></div><div><div>15 : XAUTH "workplz"</div></div><div><br></div><div><br></div><div>/etc/strongswan.conf:</div><div><br></div><div>I have just turned on all the modules that are visible in /usr/lib/ipsec/plugins/libstrongswan-*.so in order to manually be able to turn them off one at a time looking for the problem (disabling xauth made it not crash, but doesn't prove its a problem with xauth, because the connection is obviously not getting established then).</div><div><br></div><div>Note: eth0:0 is 1.2.3.4</div><div><br></div><div><br></div><div><div>charon {</div><div><span class="Apple-tab-span" style="font-size: 12pt; white-space: pre; "> </span><span style="font-size: 12pt; ">load = aes attr cmac constraints curl des dnskey fips-prf gmp hmac kernel-netlink md5 nonce pem pgp pkcs1 pkcs7 pkcs8 pubkey random resolve revocation sha1 sha2 socket-default sqlite stroke updown x509 xcbc xauth-generic </span></div><div><span class="Apple-tab-span" style="white-space:pre"> </span>charon.interfaces_use = eth0:0</div><div> dns1 = 4.2.2.2</div><div><span class="Apple-tab-span" style="font-size: 12pt; white-space: pre; "> </span><span style="font-size: 12pt; ">threads = 16</span></div><div><span class="Apple-tab-span" style="font-size: 12pt; white-space: pre; "> </span><span style="font-size: 12pt; ">plugins {</span></div><div><span class="Apple-tab-span" style="white-space:pre"> </span>sql {</div><div><span class="Apple-tab-span" style="font-size: 12pt; white-space: pre; "> </span><span style="font-size: 12pt; ">loglevel = -1</span></div><div><span class="Apple-tab-span" style="font-size: 12pt; white-space: pre; "> </span><span style="font-size: 12pt; ">}</span></div><div><span class="Apple-tab-span" style="white-space:pre"> </span>}</div><div><br></div><div><span class="Apple-tab-span" style="white-space:pre"> </span>filelog {</div><div> /var/log/charon.log {</div><div><span style="font-size: 12pt; "> time_format = %b %e %T</span></div><div><span style="font-size: 12pt; "> default = 7 </span></div><div> }</div><div> stderr {</div><div> ike = 7</div><div> knl = 7</div><div> ike_name = yes</div><div> }</div><div> }</div><div>}</div><div>pluto {</div><div>}</div><div>libstrongswan {</div><div>}</div></div><div><br></div><div><br></div><div><br></div><div><br></div><div>Please somebody help? </div><div><br></div><div>Thanks in advance,</div><div><br></div><div>Ewan</div><div><br></div><div><br></div><div><br></div><div><br></div> </div></body>
</html>