[Swan] Version 4.1 Invalid parameter ike-frag

[Paul Wouters]

On Wed, 20 Jan 2021, António Silva wrote:

> Hi,
> I recently update to version 4.1 and the parameter “ike-frag=yes” is invalid and ipsec don’t start:
> 
> Jan 20 22:25:37 sol ipsec[4132]: cannot load config '/etc/ipsec.conf': /etc/ipsec.d/con8.conf:30: syntax error,
> unexpected STRING [ike-frag]
> 
> I search in the source code and effective this keyword doesn’t exist anymore..    

The keywors is now called fragmentation=

> The wiki is broken:
> https://libreswan.org/wiki/VPN_server_for_remote_clients_using_IKEv1_XAUTH_with_Certificates#ike-frag.3D_option

updated.


> Instead, found a new “fragmentation” parameter, should i change “ike-frag=yes” to "fragmentation=yes” ?

yes.

Paul