[strongSwan] strongswan on kernel 4.14

[Tom Rymes]

Kamil,

The IPFire project is working with an upgraded 4.14 kernel in testing and noticed that IPSec traffic does not flow if compression is enabled. Disabling compression restores normal operation.

I don't know what causes it, but you might try disabling compression and see if that solves your problem.

Tom

> On Dec 16, 2017, at 10:39 AM, Kamil Jońca <kjonca at o2.pl> wrote:
> 
> 
> Recently I upgrade kernel on my debian box from 4.13 to 4.14, and
> strongswan stops working - log show that everyhing is established ok,
> but no ping between hosts.
> 
> What should I check?
> KJ
> 
> -- 
> http://wolnelektury.pl/wesprzyj/teraz/
> Three o'clock in the afternoon is always just a little too late or a little
> too early for anything you want to do.
>        -- Jean-Paul Sartre