[strongSwan] IKE Minor Version Number

Martin Willi martin at strongswan.org
Tue Jun 22 11:17:41 CEST 2010

Hi Richard,

> We see in the IKE_SA_INIT that if the minor verison is set to any value other
> thn 0 strongswan does not respond to the packet. Turning on debug traces we see
> that the charon deamon is waiting to recieve the IKE_SA_INIT packet, but it does
> not recieve it. 

Seems that we have been a little to restrictive. The socket filter code
that is used by the RAW socket did accept version 2.0 only. I pushed two
patches, one that accepts any minor version in the socket filter [1],
and one that lets pluto ignore any 2.x packets [2].

Best regards


More information about the Users mailing list