[Swan] Tunnel drops intermittently during phase 2 rekeying

Chan Jeon jeon1989 at gmail.com
Fri Dec 14 17:05:30 UTC 2018


Oh great! Could you point me the git commits that will fix the problem, so
I have a better understanding? Also, what's ETA for next release with the
fix?

Thank,

CJ

On Fri, Dec 14, 2018, 8:20 AM Paul Wouters <paul at nohats.ca wrote:

> On Thu, 13 Dec 2018, Chan Jeon wrote:
>
> > I am running libreswan 3.27 and setting up IPSec tunnels between many
> hosts using config like:
>
> > Initially, all connections come up and traffics go through with no
> problem. But when phase 2 rekey occurs, I
> > see some tunnels dropping with errors. In pluto logs, I am seeing
> CHILD_SA_NOT_FOUND and INVALID_IKE_SPI and
> > it eventually stops attempting the rekey.
>
> We are aware of the problem, and the git master version might have
> already fixed it. We are still working on some rekey code before we
> are doing a release with all fixes in place.
>
> Paul
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20181214/0d69df3c/attachment.html>


More information about the Swan mailing list