<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000066" bgcolor="#FFFFFF">
<br>
<div class="moz-cite-prefix">On 03/24/2018 02:39 PM, Noel Kuntze
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:b18f2b97-ce4f-9d25-4a3e-c28ca5a1bc90@thermi.consulting">
<pre wrap="">After two minutes of searching the strongSwan github mirror for the error message, I can tell you that the problem is that the assembled IKE message exceeds charon.max_packet, which defaults to 10000.
Simply raise that limit in charon.conf. E.g. to 30000.</pre>
</blockquote>
Would but that have fixed it, but there is no change in the symptom.<br>
<br>
I don't think I've been negligent because G**gle couldn't find
that. I guess many know that G**gle has been eliminating alot of
technical search results lately. I am dealing with so many other
problems that I would never have thought to search the source code.<br>
<br>
If I'm understanding you correctly, I need to change
/etc/strongswan/strongswan.d/charon.conf to this:<br>
<br>
charon {<br>
<br>
filelog {<br>
/var/log/charon.log {<br>
time_format = %a, %Y-%m-%d %R<br>
ike_name = yes<br>
append = no<br>
default = 2<br>
flush_line = yes<br>
max_packet = 30000<br>
<br>
mgr = 0<br>
net = 1<br>
enc = 1<br>
asn = 1<br>
job = 1<br>
knl = 1<br>
}<br>
}<br>
}<br>
<br>
... then <br>
# systemctl stop strongswan-swanctl<br>
# systemctl start strongswan-swanctl<br>
<br>
There is no change in the symptom, which would have been doubly
baffling if I -had- managed to find the error in the source.<br>
<br>
<br>
</body>
</html>