[strongSwan] non-zero reserved fields in IKE_AUTH response.

Rashmi Narasimhan rashmin at us.ibm.com
Tue Jun 29 19:33:34 CEST 2010


Thanks Tobias, We will include those changes.

If we change the reserved fields to to zero for the same given test-case it
works fine.
Would it then be a parse issue?

Regards,
Rashmi Narasimhan


|------------>
| From:      |
|------------>
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
  |Tobias Brunner <tobias at strongswan.org>                                                                                                            |
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
|------------>
| To:        |
|------------>
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
  |Richard Knight/Austin/IBM at IBMUS                                                                                                                   |
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
|------------>
| Cc:        |
|------------>
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
  |Martin Willi <martin at strongswan.org>, Rashmi Narasimhan/Austin/IBM at IBMUS, users at lists.strongswan.org                                              |
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
|------------>
| Date:      |
|------------>
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
  |06/29/2010 11:56 AM                                                                                                                               |
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
|------------>
| Subject:   |
|------------>
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
  |Re: [strongSwan] non-zero reserved fields in IKE_AUTH response.                                                                                   |
  >--------------------------------------------------------------------------------------------------------------------------------------------------|





Hi Richard,

from the log it looks like the ID is parsed incorrectly (you could increase
the
loglevel to see the details):

09[AUD] authentication of '2001:db8:f:1::1f5c57111eaff84b7' with pre-shared
key
failed

The reason for this could be an alignment issue in the parser that has been
fixed in [1] (4.3.1 was the first release to contain that fix).  Since you
are
running 4.1.10 on an embedded platform, there might well be other alignment
issues that have since been fixed, so please be aware.

Regards,
Tobias

[1] http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=42748858

--
======================================================================
Tobias Brunner                                   tobias at strongswan.org
strongSwan - The Linux VPN Solution!         http://www.strongswan.org
======================================================================

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20100629/3ad7fb57/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: graycol.gif
Type: image/gif
Size: 105 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20100629/3ad7fb57/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ecblank.gif
Type: image/gif
Size: 45 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20100629/3ad7fb57/attachment-0001.gif>


More information about the Users mailing list