-
The system kernel parameters are: Linux edge desktop 4.9.253-rqx580 # 1 SMP PREEMPT Tue Jan 18 14:08:53 CST 2022 aarch64 aarch64 GNU/Linux
When two nodes want to negotiate encryption, the Pluto log…
-
Hello, this is a somewhat similar question to #62.
I have spent some time tonight setting up a connection to a VPN over IKEv2 with PSK + auth. I tried the suggested strongswan addon mentioned in th…
-
Jul 9 23:19:37.119069: "private-or-clear#193.110.157.0/24"[1] ...193.110.157.131 #4: certificate verified OK: CN=letsencrypt.libreswan.org
Jul 9 23:19:37.119253: "private-or-clear#193.110.157.0/24"…
-
It results in a routed template. But a routed template is only valid when the connection is OE.
v4.x rejected this with in instantiate_ondemand(), but it should never have been routed?
```
if (c-…
-
**TL;DR:** Some repository has some CVE patched, but Repology shows the package as vulnerable. This is known, and that's why Repology uses the term "potentially vulnerable". However there's no easy wa…
-
Sometimes but every single time, I found this wired phenomenon——the SA has established,host 1 cannot connect host 2.
I found host1 had intact XFRM PO:
```
src 10.8.174.71/32 dst 10.8.174.70/32
d…
-
kernel: pluto[28832]: segfault at 98 ip 0000560da4e29b5e sp 00007ffe028083d0 error 4 in pluto[560da4dd3000+1ae000]
addr2line -e /usr/libexec/ipsec/pluto -fCi 0x56B5E
??
/usr/src/debug/libreswa…
bleve updated
2 years ago
-
when I run "ipsec auto --up test", this problem occurs with config file below and the version is release 3.0.0,
There is no such problem in main mode
ipsec.conf:
conn test
authby=secret…
-
Since the arrival of ios 14 I have no longer been able to use the vpn with devices that use this system.
I don't know how to intervene in the configurations to make Openswan compatible even with Appl…
-
So this quirk was documented!