<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div><span></span></div><div><div dir="ltr">Experts,</div><div dir="ltr"><br></div><div dir="ltr">Need urgent help.<br><div><br></div><div>When I try to use strongswan with SHA256, I see that the negotiation fails at child SA creation time. I am using <br>
strongSwan 5.1.3, Linux 2.6.21 version). Following is the log:</div><div><br></div>
<p class="">arsed CREATE_CHILD_SA response 4 [ N(USE_TRANSP) SA No TSi TSr ]</p><p class="">received netlink error: Invalid argument (22)</p><p class="">unable to add SAD entry with SPI c28f19c1</p><p class="">received netlink error: Invalid argument (22)</p><p class="">unable to add SAD entry with SPI c088894f</p><p class="">unable to install inbound and outbound IPsec SA (SAD) in kernel</p><p class="">failed to establish CHILD_SA, keeping IKE_SA</p><p class="">
</p><p class="">sending DELETE for ESP CHILD_SA with SPI c28f19c1</p><p class=""><br></p><p class="">I have already tried the changes mentioned in <a href="https://lists.strongswan.org/pipermail/users/2013-September/005203.html">https://lists.strongswan.org/pipermail/users/2013-September/005203.html</a> and it doesnt seem to work.</p><p class="">Is there any other fix for this issue?</p><p class="">Rgds,</p><p class="">Lakshmi</p></div>
</div></body></html>