[strongSwan] strongswan memory leak v 5.6.3
    Amstaff zg 
    amstaff.zg at gmail.com
       
    Wed Dec  4 15:01:19 CET 2019
    
    
  
Hi all,
I've noticed a memory leak on my VPN servers and everything points to
memory leak in strongswan.
My configuration is:
config setup
        charondebug="ike 1, knl 1, cfg 0"
        uniqueids=no
        strictcrlpolicy=no
conn %default
        ikelifetime=30m
        keylife=10m
        rekeymargin=3m
        keyingtries=1
        keyexchange=ikev2
        ike=aes256-sha256-modp1024,aes128-sha256-ecp256,aes256-sha384-ecp384,aes128-sha256-modp2048,aes128-sha1-modp2048,aes256-sha384-modp4096,aes256-sha256-modp4096,aes256-sha1-modp4096,aes128-sha256-modp1536,aes128-sha1-modp1536,aes256-sha384-modp2048,aes256-sha256-modp2048,aes256-sha1-modp2048,aes128-sha256-modp1024,aes128-sha1-modp1024,aes256-sha384-modp1536,aes256-sha256-modp1536,aes256-sha1-modp1536,aes256-sha384-modp1024,aes256-sha256-modp1024,aes256-sha1-modp1024!
    esp=aes256gcm16-modp1024-modp2048,aes128gcm16-ecp256,aes256gcm16-ecp384,aes128-sha256-ecp256,aes256-sha384-ecp384,aes128-sha256-modp2048,aes128-sha1-modp2048,aes256-sha384-modp4096,aes256-sha256-modp4096,aes256-sha1-modp4096,aes128-sha256-modp1536,aes128-sha1-modp1536,aes256-sha384-modp2048,aes256-sha256-modp2048,aes256-sha1-modp2048,aes128-sha256-modp1024,aes128-sha1-modp1024,aes256-sha384-modp1536,aes256-sha256-modp1536,aes256-sha1-modp1536,aes256-sha384-modp1024,aes256-sha256-modp1024,aes256-sha1-modp1024,aes128gcm16,aes256gcm16,aes128-sha256,aes128-sha1,aes256-sha384,aes256-sha256,aes256-sha1!
conn android
        left=%any
        leftsubnet=0.0.0.0/0
        leftcert=server.cert.pem
        leftauth=pubkey
    rekey=no
        rightauth=eap-radius
        rightsendcert=never
        right=%any
        rightsourceip=10.200.0.0/16
    eap_identity=%identity
    dpdaction=clear
    dpddelay=30s
    dpdtimeout=200s
        auto=add
conn ios
    left=%any
    leftid=xxxxxxxxxxxxxxxxxx
    leftsubnet=0.0.0.0/0
    leftcert=server.cert.pem
    leftsendcert=always
    right=%any
    rightauth=eap-radius
    rightsourceip=10.200.0.0/16
    eap_identity=%identity
    auto=add
Anyone had similar issues?
Thanks.
BR,
Kreso
    
    
More information about the Users
mailing list