[Swan-dev] strongswan fragmentation notify payload dropped in later versions?
paul at nohats.ca
Sat Oct 3 19:11:19 UTC 2015
It seems strongswan has actually shown regression. I bumped my machine
to use 5.3.3 and do a test where strongswan initiates and we want
fragmentation. It failed to send the notify payload. I then added
fragmentation=yes and it still didn't sent the notify:
--- ./west.console.txt 2015-09-17 17:27:01.672530145 -0400
+++ OUTPUT/west.console.txt 2015-10-03 15:01:48.889730298 -0400
@@ -35,6 +35,7 @@
Loading conn 'westnet-eastnet-ikev2'
@@ -49,7 +50,7 @@
strongswan up westnet-eastnet-ikev2
initiating IKE_SA westnet-eastnet-ikev2 to 184.108.40.206
-generating IKE_SA_INIT request 0 [ SA KE No N(FRAG_SUP) N(NATD_S_IP) N(NATD_D_IP) N(HASH_ALG) ]
+generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) ]
sending packet: from 220.127.116.11 to 18.104.22.168 (XXX bytes)
received packet: from 22.214.171.124 to 126.96.36.199 (XXX bytes)
parsed IKE_SA_INIT response 0 [ SA KE No N(FRAG_SUP) N(NATD_S_IP) N(NATD_D_IP) ]
I have to dive into why this notification payload is no longer
appearing.... But its not due to bad versions of strongswan, which I
told people before....
More information about the Swan-dev