[Swan] Regression in IPv4 Connectivity from Windows 10 Client

Andrew Cagney cagney at gnu.org
Mon Oct 31 21:45:05 EET 2022


Nice work.

> I have noticed today (after having figured out how to connect IPv4-only
from Windows 10) that I lose connectivity
with github libreswan, while I still had it with libreswan-4.9 from tarball.

When you say "lose" connectivity, do you mean it never connects or dies
after a short while?

https://github.com/libreswan/libreswan/commit/bc47dcf87733484f5701b02212c3015a711ca1a9
added code to check the content of the CP payload so, presumably, microsoft
is sending something pluto didn't expect.

Was there an error related to CP in the logs? And if possible try a test
run with debug=all enabled so that the CP payloads are captured and put
that in a bug.




On Mon, 31 Oct 2022 at 15:07, Mirsad Goran Todorovac <
mirsad.todorovac at alu.unizg.hr> wrote:

> Hi all,
>
> I have noticed today (after having figured out how to connect IPv4-only
> from Windows 10) that I lose connectivity
> with github libreswan, while I still had it with libreswan-4.9 from
> tarball.
>
> I felt inspired and bisect gave this (at this commit I lost IPv4 Win 10
> connectivity):
>
> git bisect good e75c5ce30d7b6e5311dd05a4d0512a5f61add78f
> # bad: [4e1ceb32c64b8b077c41c538e39c5b6252b826b6] connections: pass struct
> connection_end into extract_end()
> git bisect bad 4e1ceb32c64b8b077c41c538e39c5b6252b826b6
> # bad: [bc47dcf87733484f5701b02212c3015a711ca1a9] ikev2: during IKE_AUTH
> parse IKEv2 CP requests
> git bisect bad bc47dcf87733484f5701b02212c3015a711ca1a9
> # good: [823443d6c796340128720a295c99f7eacae09d67] connections: (more) use
> ...->host->config rather than ...->config->host
> git bisect good 823443d6c796340128720a295c99f7eacae09d67
> # first bad commit: [bc47dcf87733484f5701b02212c3015a711ca1a9] ikev2:
> during IKE_AUTH parse IKEv2 CP requests
> root at magrf:~/libreswan#
>
> Windows specs:
>
>
> VPN server is on Debian 11 Bullseye and stock kernel, on a rather old
> development can.
>
> Hope this helps.
>
> Kind regards,
> Mirsad
>
> --
> Mirsad Todorovac
> Sistem inženjer
> Grafički fakultet | Akademija likovnih umjetnosti
> Sveučilište u Zagrebu
> --
> System engineer
> Faculty of Graphic Arts | Academy of Fine Arts
> University of Zagreb, Republic of Croatia
> tel. +385 (0)1 3711 451
> mob. +385 91 57 88 355
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20221031/b0558175/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 49fDqolg9vDJFfCd.png
Type: image/png
Size: 8132 bytes
Desc: not available
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20221031/b0558175/attachment-0001.png>


More information about the Swan mailing list