[strongSwan] failing to decrypt esp

[Martin Willi]

> I tried a manual entry and it looks good.  So is there a strongswan config
> option perhaps I am missing?

No, looks more like a bug. Unfortunately it is very difficult for me to
debug this without having such a board. If you want to debug this
yourself, have a look at [1] how the Netlink messages gets constructed
in userland. Debugging the kernel at [2] might give you some insight
what is wrong.

Regards
Martin

[1]http://git.strongswan.org/?p=strongswan.git;a=blob;f=src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c;hb=HEAD#l1153
[2]http://git.strongswan.org/?p=linux-dumm.git;a=blob;f=net/xfrm/xfrm_user.c;hb=HEAD#l570