[strongSwan] --enable-unity bug?
Gerald Richter - ECOS
gerald.richter at ecos.de
Wed Nov 21 06:28:17 CET 2012
I have the same problem as soon as unity is loaded.
If you can provide a patch, I can test it against iOS5 and iOS6
> -----Original Message-----
> From: users-bounces+richter=ecos.de at lists.strongswan.org [mailto:users-
> bounces+richter=ecos.de at lists.strongswan.org] On Behalf Of Martin Willi
> Sent: Tuesday, November 20, 2012 4:54 PM
> To: j at owind.com
> Cc: users at lists.strongswan.org
> Subject: Re: [strongSwan] --enable-unity bug?
> > when compile with --enable-unity, then must be set any one of
> > unity_split_include like:
> > ipsec pool --addattr unity_split_include
> The unity plugin works completely independently of Split-Include attributes
> configured through a pool. You should use only one of them.
> The unity plugin builds Split-Include attributes automatically from leftsubnet
> definitions and allows the daemon to enforce these subnets.
> Pool attributes, though, are just plain attributes to send, the client may or
> may not respect them.
> > 10[CFG] sending UNITY_SPLIT_INCLUDE: 0.0.0.0/0
> Probably the iOS client does not like 0.0.0.0/0 Split-Include attributes. Maybe
> we should just omit it in this case, but I currently don't have an iOS device
> here for testing.
> Users mailing list
> Users at lists.strongswan.org
More information about the Users