[strongSwan] Some queries on behavior with respect to "NO_ADDITIONAL_SAS" & "UNSUPPORTED_CRITICAL_PAYLOAD"

Martin Willi martin at strongswan.org
Wed Mar 20 07:57:01 CET 2013

> I'm awaiting your response regarding the "UNSUPPORTED_CRITICAL_PAYLOAD" query.

Yes, that should be possible by sending a payload, for example in the
private range, having the critical bit set. I haven't tested if this
works correctly with 4.5.3, though.

> Meanwhile, I'm attaching the logs for your following query :
> " Do you see in the log why strongSwan sends this second request for a new
> IKE_SA? Is it a retransmit?"

Please use sane loglevels (loglevel 1 for all subsystems), preferably
reproduced with the latest strongSwan version.


More information about the Users mailing list