[strongSwan] sha256 failing with netlink error

Lakshmi Prasanna lakshmi.1147 at gmail.com
Fri Aug 12 03:04:06 CEST 2016


Experts,

Need urgent help.

When I try to use strongswan with SHA256, I see that the negotiation fails at child SA creation time. I am using 
   strongSwan 5.1.3, Linux 2.6.21 version). Following is the log:

arsed CREATE_CHILD_SA response 4 [ N(USE_TRANSP) SA No TSi TSr ]

received netlink error: Invalid argument (22)

unable to add SAD entry with SPI c28f19c1

received netlink error: Invalid argument (22)

unable to add SAD entry with SPI c088894f

unable to install inbound and outbound IPsec SA (SAD) in kernel

failed to establish CHILD_SA, keeping IKE_SA

sending DELETE for ESP CHILD_SA with SPI c28f19c1



I have already tried the changes mentioned in https://lists.strongswan.org/pipermail/users/2013-September/005203.html and it doesnt seem to work.

Is there any other fix for this issue?

Rgds,

Lakshmi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20160812/81644628/attachment.html>


More information about the Users mailing list