[strongSwan] IKE Minor Version Number
martin at strongswan.org
Tue Jun 22 11:17:41 CEST 2010
> We see in the IKE_SA_INIT that if the minor verison is set to any value other
> thn 0 strongswan does not respond to the packet. Turning on debug traces we see
> that the charon deamon is waiting to recieve the IKE_SA_INIT packet, but it does
> not recieve it.
Seems that we have been a little to restrictive. The socket filter code
that is used by the RAW socket did accept version 2.0 only. I pushed two
patches, one that accepts any minor version in the socket filter ,
and one that lets pluto ignore any 2.x packets .
More information about the Users