[Swan-dev] (null) in pluto and console logs

Andrew Cagney andrew.cagney at gmail.com
Mon Jul 16 16:59:29 UTC 2018


FYI, the kernel algorithm with no name that was stripped out is:
  #define SADB_X_AALG_SHA2_256HMAC_TRUNCBUG    252
I think I'll cry ...


On Mon, 9 Jul 2018 at 13:39, Andrew Cagney <andrew.cagney at gmail.com> wrote:
>
> Yes.  Check the mail archives, for a post from me.  I'm sitting on a tweak to kvmrunner to check for this. Post 3.24 and now post f28?
>
> On Mon, Jul 9, 2018, 11:10 AM D. Hugh Redelmeier <hugh at mimosa.com> wrote:
>>
>> These should be fixed.
>>
>> In the pluto logs there are a lot of messages but they boil down only
>> a couple of messages when the context is stripped:
>>
>> In pluto logs:
>>    NONE                IKEv1:     ESP     IKEv2:     ESP     FIPS  (null)
>>  IKE SA responder matching remote ESP/AH proposals responder SA processing returned (null)
>>
>>
>> In console.verbose.txt logs there are very few:
>>
>> addconn-03/OUTPUT/west.console.verbose.txt:conn: "test" modecfgdns=(null)
>> addconn-03/OUTPUT/west.console.verbose.txt:conn: "test" modecfgdomains=(null)
>> addconn-03/OUTPUT/west.console.verbose.txt:conn: "test" modecfgbanner=(null)
>> addconn-03/OUTPUT/west.console.verbose.txt:conn: "test" mark=(null)
>> addconn-03/OUTPUT/west.console.verbose.txt:conn: "test" mark-in=(null)
>> addconn-03/OUTPUT/west.console.verbose.txt:conn: "test" mark-out=(null)
>> addconn-03/OUTPUT/west.console.verbose.txt:conn: "test" vti_iface=(null)
>> algparse-01/OUTPUT/west.console.verbose.txt:  NONE                IKEv1:     ESP     IKEv2:     ESP     FIPS  (null)
>> algparse-02-fips/OUTPUT/west.console.verbose.txt:  NONE                IKEv1:     ESP     IKEv2:     ESP     FIPS  (null)
>> seccomp-01-enabled/OUTPUT/west.console.verbose.txt:[   66.337557] audit: type=1305 audit(1531098460.326:103): auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 op="remove_rule" key=(null) list=1 res=1^M
>> _______________________________________________
>> Swan-dev mailing list
>> Swan-dev at lists.libreswan.org
>> https://lists.libreswan.org/mailman/listinfo/swan-dev


More information about the Swan-dev mailing list