[Swan-dev] [libreswan/libreswan] ERROR: netlink XFRM_MSG_UPDPOLICY response for flow eroute_connection add included errno 22: Invalid argument (#215)

[Paul Wouters]

On Tue, 16 Oct 2018, Radosław Kujawa wrote:

> Subject: [libreswan/libreswan] ERROR: netlink XFRM_MSG_UPDPOLICY response for
>     flow eroute_connection add included errno 22: Invalid argument (#215)

> Hello. I'm trying to set up an IPv6 transport mode using libreswan 3.25 (as distributed with Fedora 28).

> #      this parameter not supported anymore...
> #	connaddrfamily=ipv6

That sis obsoleted because it auto-detects this now based on the client
used.

> Oct 16 13:05:44 oe-test1.test.c0ff33.net pluto[29313]: loading group "/etc/ipsec.d/policies/private"
> Oct 16 13:05:44 oe-test1.test.c0ff33.net pluto[29313]: "private#2a02:4c80:10:64::/64": ERROR: netlink XFRM_MSG_UPDPOLICY response for fl
> ow eroute_connection add included errno 22: Invalid argument
> 
> The same configuration seems to be working with CentOS 7.5 (libreswan 3.23). Though there connaddrfamily parameter is uncommented.
> 
> There seems to be some kind of problem with parsing the contents of policy file? Or libreswan inconrrectly assumes that the content
> should be IPv4 address? Any hints/ideas?

I'll investigate. Thanks for letting us now.

Paul