[strongSwan] Load-tester failure/bug

[Gruber Tobias (ST-ESS/MKP3)]

We want to do a load test. Thus I have compiled strongSwan 5.1.2 and enabled
the load-tester plugin by --enable-load-tester.
This seems to be fine.

Then I have removed the key from /etc/ipsec.secrets
I added the following in /etc/strongswan.conf:

    plugins {
        load-tester {
            # enable the plugin
            enable = yes
            # use 4 threads to initiate connections simultaneously
            initiators = 4
            # each thread initiates 1000 connections
            iterations = 1000
            # delay each initiation in each thread by 20ms
            delay = 20
            # fake the kernel interface to avoid SA conflicts
            fake_kernel = yes
        }
    }

I have restarted ipsec: sudo ipsec restart

Then I have started the load test: ipsec load-tester initiate 1 1

The following appears on the command line: .***-

I have looked into the logfile and saw that the tunnel establishment is
failing
MAC verification failed. Verifying encryption payload integrity failed.
Could not decrypt payloads. Integrity check failed.

I have attached a screenshot of the log.


Can you help on this?




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140303/b5b091e8/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Zwischenablage02.png
Type: image/png
Size: 93220 bytes
Desc: Zwischenablage02.png
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140303/b5b091e8/attachment.png>