[Swan] Working VPN but Moany Log

[Madden, Joe]

Hi Paul,

Thanks for that - Is there any danger in just putting up with the moany log?

Where using the RHEL supplied version so I guess I would need to wait for them to push this fix?

Cheers

Joe.

-----Original Message-----
From: Paul Wouters [mailto:paul at nohats.ca] 
Sent: 22 May 2018 16:57
To: Madden, Joe <Joe.Madden at mottmac.com>
Cc: swan at lists.libreswan.org
Subject: Re: [Swan] Working VPN but Moany Log

On Tue, 22 May 2018, Madden, Joe wrote:

> We have a VPN working with a Cisco ASA 5506 but where getting the random log entries:
>
> sending unencrypted notification v2N_INVALID_IKE_SPI to

You might be hit by the fragmentation bug, that could cause these to happen. Try applying:

https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Flibreswan%2Flibreswan%2Fcommit%2F95b87fb161287ddc7ac8e2c2bebca896da89a20d&data=01%7C01%7CJoe.Madden%40mottmac.com%7C584c67318f39440da87e08d5bffc997a%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=F51ttATqcVRDMsepDKQhgycmBOy%2B3DtGf1G8FqwrhFs%3D&reserved=0

Paul