[strongSwan] [IKEv2 Mobike] error uninstalling route installed with policy

[Tobias Brunner]

Hi Amy,

> I don't know how to add DBG statements to get_replay_state() for I don't
> quite know the C language, could you give me some DBG statements?

You can try the attached patch.  You'll have to compile strongSwan from
sources [1] and apply the patch after extracting the tarball with:

  patch -p1 < /path/to/kernel-netlink.patch

If you installed strongSwan from an RPM package uninstall that first.

> I tried several times on centos 5.9 and 6.2 separately, every time,
> ping to right subnets pass on centos 6.2 but fail on centos 5.9.
> Is there anything about linux kernel version?

Yes, most likely there is something amiss with the 2.6.18 kernel used by
CentOS 5.9.

> I also noticed that on strongswan started, there are plugins unable
> to load, but I don't konw which plugins can't be loaded.

These shouldn't be an issue (most likely some DSA plugin features that
none of our crypto backends support).

Regards,
Tobias

[1]
https://wiki.strongswan.org/projects/strongswan/wiki/InstallationDocumentation#Compile-yourself

-------------- next part --------------
A non-text attachment was scrubbed...
Name: kernel-netlink.patch
Type: text/x-patch
Size: 1584 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140822/65c67e3c/attachment.bin>