[Swan-dev] Regression with IKEv1 XAUTH in current git

Tuomo Soini tis at foobar.fi
Wed Feb 27 09:07:41 UTC 2019


We had issue that IKEv1 XAUTH didn't work with other implementations.

That issue was fixed by Paul as of
7b424f52fffa00d0cb114720c136139318a71142.

But there is still an issue with DPD with XAUTH clients after this.
After DPD timeout time libreswan just drops vpn connection.

with settings of dpddelay=30, dpdtimeout=120 road warrior is killed by
DPD after a little more than two minutes.

This is a release blocker for 3.28.

-- 
Tuomo Soini <tis at foobar.fi>
Foobar Linux services
+358 40 5240030
Foobar Oy <https://foobar.fi/>


More information about the Swan-dev mailing list