Super FreeSWAN 1.99.6 broken

Igmar Palsenberg <[email protected]> Wed, 26 Mar 2003 23:00:28 +0100 (CET)
Newsgroups gmane.network.freeswan.devel,gmane.network.freeswan.user
Message-ID <[email protected]>
Hi,

After looking at the issue 'no connection know for ..' problem again I 
come to the conclusion that something is broken since at least 
super-freeswan 1.99.5rc2 :

Mar 26 22:35:00 fw pluto[4215]: "dhcp"[4] 213.196.17.109 #6: cannot 
respond to IPsec SA request because no connection is known for 
0.0.0.0/0===213.93.97.7[@base.jdimedia.nl]:17/0...213.196.17.109[C=NL, 
ST=Gelderland, O=Igmar, CN=laptop.jdimedia.nl, 
[email protected]]:17/0===10.20.1.100/32

This is without NAT-T, just a plain DHCP-over-IPSEC config that works with 
FreeSWAN 1.99 + X509 patch + AES + delete-notiy (I'll look up the version 
tomorrow).

I'll do a manual patchup to the above setup, but with the lates version to 
see if the problem goes away.

The config (this does work on an older version) :

# basic configuration
config setup
        interfaces=%defaultroute
        klipsdebug=none
        plutodebug=none
        plutoload=%search
        plutostart=%search
        uniqueids=yes

# basic configuration
conn %default
        keyingtries=3
        ikelifetime=3h
        keylife=1h
        disablearrivalcheck=no
        authby=rsasig
        left=%defaultroute
        leftcert=base-test.pem
        [email protected]
        right=%any
        rightrsasigkey=%cert
        esp=des3,aes128
        auto=add

conn dhcp
        rekey=no
        keylife=60s
        rekeymargin=30s
        leftsubnet=0.0.0.0/0
        leftprotoport=udp/bootps
        rightprotoport=udp/bootpc

conn roadwarrior
        leftsubnet=10.0.0.0/16
        rightsubnetwithin=10.20.0.0/16

conn roadwarrior-sentinel
        leftsubnet=0.0.0.0/0
        rightsubnetwithin=10.20.0.0/24

Anyone got a clue ??




	Regards,


		Igmar