[Swan-dev] ikev2-14-missing-ke test failure

[Antony Antony]

this was probably caused by sms-timeout fixes I did and forgot about it. Since it is only used in testing.

We should fix it. Let me have a look. There was a call to release_whack(st). That would not release whack; no idea why.

btw: while trying ikev2-14-missing-ke I noticed 
/testing/pluto/bin/wait-until-pluto-started takes longer. Is it due to the recent change?

ipsec whack --listen
002 listening for IKE messages
002 forgetting secrets
002 loading secrets from "/etc/ipsec.secrets"
003 WARNING: PSK entropy of 2.251629 is less than minimum Shannon Entropy of 3.500000 - this will be rejected as of July 1st, 2015

I will update secrets.

On Sat, Jan 03, 2015 at 01:10:29PM -0500, Paul Wouters wrote:
> Yes I have this problem too in master. Despite --no-retransmits the whack is not released in time.
> 
> But Antony will be working on reducing g the timers in the next few weeks, so this problem will resolve itself :)
> 
> Sent from my iPhone
> 
> > On Dec 29, 2014, at 02:10, D. Hugh Redelmeier <hugh at mimosa.com> wrote:
> > 
> > In my recent run, west's console output doesn't match the reference 
> > output.  Here's an extract:
> > 
> > 133 "westnet-eastnet-ipv4-psk-ikev2" #1: STATE_PARENT_I1: sent v2I1, expected v2R1
> > +002 "westnet-eastnet-ipv4-psk-ikev2" #1: supressing retransmit because IMPAIR_RETRANSMITS is set.
> > 002 "westnet-eastnet-ipv4-psk-ikev2" #1: STATE_PARENT_I1: received unauthenticated v2N_INVALID_SYNTAX - ignored
> > -002 "westnet-eastnet-ipv4-psk-ikev2" #1: supressing retransmit because IMPAIR_RETRANSMITS is set
> > -031 "westnet-eastnet-ipv4-psk-ikev2" #1: max number of retransmissions (0) reached STATE_PARENT_I1.  No response (or no acceptable response) to our first IKEv2 me!
> > -002 "westnet-eastnet-ipv4-psk-ikev2" #1: deleting state #1 (STATE_PARENT_I1)
> > -west #
> > +^C#\[root at west ]#  timedout send line: ipsec auto --up  westnet-eastnet-ipv4-psk-ikev2
> >  echo done
> > -done
> > 
> > and from here on there is a serious divergence.
> > 
> > Is this expected?  Is this a bug that I've introduced?
> > 
> > A similar failure occurs in:
> > ikev2-major-version-initiator
> > ikev2-major-version-responder
> > ikev2-allow-narrow-02
> > basic-pluto-15-no-retransmit
> > and possibly others.
> > _______________________________________________
> > Swan-dev mailing list
> > Swan-dev at lists.libreswan.org
> > https://lists.libreswan.org/mailman/listinfo/swan-dev
> _______________________________________________
> Swan-dev mailing list
> Swan-dev at lists.libreswan.org
> https://lists.libreswan.org/mailman/listinfo/swan-dev
>