<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<font face="Courier New">Hi Tobias,<br>
<br>
</font><font face="Courier New">Thank you for the idea, but I'm
using version 5.5.1 (see below).</font><br>
<font face="Courier New">-------------------------------------------------------<br>
root@atm:~# ipsec version<br>
Linux strongSwan U5.5.1/K3.16.0-4-586<br>
Institute for Internet Technologies and Applications<br>
University of Applied Sciences Rapperswil, Switzerland<br>
See 'ipsec --copyright' for copyright information.<br>
root@atm:~#<br>
</font><font face="Courier New">-------------------------------------------------------<br>
I compiled it on Debian 8.6 VM, after using the following
configuration options:<br>
./configure --prefix=/usr --sysconfdir=/etc --enable-openssl
--enable-gmp --enable-charon --enable-stroke --enable-curl
--enable-sqlite --enable-agent --enable-gcm<br>
<br>
Best regards,<br>
Gyula<br>
<br>
<br>
</font><br>
<div class="moz-cite-prefix">On 2016.11.07. 09:35, Tobias Brunner
wrote:<br>
</div>
<blockquote
cite="mid:6e86c830-40a3-c873-cf1c-9275fb44d181@strongswan.org"
type="cite">
<pre wrap="">Hi Gyula,
</pre>
<blockquote type="cite">
<pre wrap="">Anybody have an idea what could be wrong?
</pre>
</blockquote>
<pre wrap="">
That's due to a recently fixed bug that mapped the aes*gmac keywords
incorrectly for AH proposals. You may either update to 5.5.1, which
includes the fix, or try to apply the patch at [1] (won't apply cleanly
to any older version as it is based on other changes).
Regards,
Tobias
[1] <a class="moz-txt-link-freetext" href="https://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=a65a282f">https://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=a65a282f</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Gyula Kovács
KKB-Tech
+36 30 257 9319
</pre>
</body>
</html>