[strongSwan] Clarification about INVALID_MAJOR_VERSION

Martin Willi martin at strongswan.org
Wed Sep 10 11:18:16 CEST 2014


Hi,

> IKE_SA_INIT request with major version 3 is sent, charon log shows that 
> the header verification failed

> Sep  8 11:40:01 01[ENC] header verification failed
> Sep  8 11:40:01 01[NET] received invalid IKE header from 2001:db8:f:1::1 

Looks like we are a little to strict in verifying the sanity of exchange
types for the different IKE versions. I've tried to address this, please
try the patch available at [1].

Regards
Martin

[1]http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=1915ef24



More information about the Users mailing list