[strongSwan] Clarification about INVALID_MAJOR_VERSION

kumuda kumuda at linux.vnet.ibm.com
Thu Sep 11 07:50:07 CEST 2014


On 09/10/2014 02:48 PM, Martin Willi wrote:
> Hi,
>
>> IKE_SA_INIT request with major version 3 is sent, charon log shows that
>> the header verification failed
>> Sep  8 11:40:01 01[ENC] header verification failed
>> Sep  8 11:40:01 01[NET] received invalid IKE header from 2001:db8:f:1::1
> Looks like we are a little to strict in verifying the sanity of exchange
> types for the different IKE versions. I've tried to address this, please
> try the patch available at [1].
>
> Regards
> Martin
>
> [1]http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=1915ef24
Applied this patch and receiving INFORMATION response instead of 
IKE_SA_INIT response.
Sep 10 05:07:21 10[ENC] parsed a IKE_SA_INIT request header
Sep 10 05:07:21 10[ENC] added payload of type NOTIFY to message
Sep 10 05:07:21 10[ENC] added payload of type NOTIFY to message
Sep 10 05:07:21 10[ENC] generating INFORMATIONAL response 0 [ 
N(INVAL_MAJOR) ]

>
>
>



More information about the Users mailing list