[Swan-dev] misleading error message in a run of pluto/psk-pluto-05

Paul Wouters paul at nohats.ca
Mon Aug 20 03:08:53 UTC 2018


On Sun, 19 Aug 2018, D. Hugh Redelmeier wrote:

> I got this diagnostic in psk-pluto-05, in the pluto log for east
>
> "road-east-psk"[1] 192.1.3.174 #2: message ignored because it contains an unexpected payload type (ISAKMP_NEXT_HASH)
> "road-east-psk"[1] 192.1.3.174 #2: sending encrypted notification INVALID_PAYLOAD_TYPE to 192.1.3.174:500
>
> The message from road should have been suppressed.  It was a
> retransmission of the previous message.  We used to save the last
> message received and discard a message if it was a repeat of the
> previous one.
>
> What happened?  Why did this change?  Or am I misremembering how this works.

I have seen these errors in the wild where it was unclear why it was
happening. this could have been that reason.

Paul


More information about the Swan-dev mailing list