[Swan-dev] ikev2-14-missing-ke test failure

Paul Wouters paul at nohats.ca
Sat Jan 3 20:10:29 EET 2015


Yes I have this problem too in master. Despite --no-retransmits the whack is not released in time.

But Antony will be working on reducing g the timers in the next few weeks, so this problem will resolve itself :)

Sent from my iPhone

> On Dec 29, 2014, at 02:10, D. Hugh Redelmeier <hugh at mimosa.com> wrote:
> 
> In my recent run, west's console output doesn't match the reference 
> output.  Here's an extract:
> 
> 133 "westnet-eastnet-ipv4-psk-ikev2" #1: STATE_PARENT_I1: sent v2I1, expected v2R1
> +002 "westnet-eastnet-ipv4-psk-ikev2" #1: supressing retransmit because IMPAIR_RETRANSMITS is set.
> 002 "westnet-eastnet-ipv4-psk-ikev2" #1: STATE_PARENT_I1: received unauthenticated v2N_INVALID_SYNTAX - ignored
> -002 "westnet-eastnet-ipv4-psk-ikev2" #1: supressing retransmit because IMPAIR_RETRANSMITS is set
> -031 "westnet-eastnet-ipv4-psk-ikev2" #1: max number of retransmissions (0) reached STATE_PARENT_I1.  No response (or no acceptable response) to our first IKEv2 me!
> -002 "westnet-eastnet-ipv4-psk-ikev2" #1: deleting state #1 (STATE_PARENT_I1)
> -west #
> +^C#\[root at west ]#  timedout send line: ipsec auto --up  westnet-eastnet-ipv4-psk-ikev2
>  echo done
> -done
> 
> and from here on there is a serious divergence.
> 
> Is this expected?  Is this a bug that I've introduced?
> 
> A similar failure occurs in:
> ikev2-major-version-initiator
> ikev2-major-version-responder
> ikev2-allow-narrow-02
> basic-pluto-15-no-retransmit
> and possibly others.
> _______________________________________________
> Swan-dev mailing list
> Swan-dev at lists.libreswan.org
> https://lists.libreswan.org/mailman/listinfo/swan-dev


More information about the Swan-dev mailing list