<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi,<div class=""><br class=""></div><div class="">I’ve found an issue that my tunnel is not up after I reboot my machine., if I connect via ssh restart ipsec it connects.. no errors. </div><div class=""><br class=""></div><span class="">What I notice is that is because network is not enable yet, I mean, no dns to resolve the right address, form the logs I get:<br class=""></span><span class=""><br class=""></span><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(242, 242, 242); background-color: rgb(0, 0, 0);" class=""><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">[16:47:48][beelink][~]# systemctl status ipsec</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #2fb41d" class="">●</span><span style="font-variant-ligatures: no-common-ligatures" class=""> ipsec.service - Internet Key Exchange (IKE) Protocol Daemon for IPsec</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Loaded: loaded (/lib/systemd/system/ipsec.service; enabled; vendor preset: disabled)</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Active: </span><span style="font-variant-ligatures: no-common-ligatures; color: #2fb41d" class="">active (running)</span><span style="font-variant-ligatures: no-common-ligatures" class=""> since Wed 2021-09-08 16:46:24 CEST; 1min 25s ago</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Docs: man:ipsec(8)</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> man:pluto(8)</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> man:ipsec.conf(5)</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Main PID: 1224 (pluto)</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Status: "Startup completed."</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Tasks: 4 (limit: 4597)</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Memory: 11.8M</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> CPU: 1.529s</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> CGroup: /system.slice/ipsec.service</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> └─1224 /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf --nofork</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; min-height: 14px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; line-height: normal; color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #f2f2f2" class="">Sep 08 16:46:24 beelink pluto[1224]: </span><span style="font-variant-ligatures: no-common-ligatures" class="">"tunnel1": we cannot identify ourselves with either end of this connection. 192.168.1.60 or <unset-address> are not usable</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #f2f2f2" class="">Sep 08 16:46:24 beelink pluto[1224]: </span><span style="font-variant-ligatures: no-common-ligatures" class="">"tunnel1": failed to initiate connection</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #f2f2f2" class="">Sep 08 16:46:26 beelink pluto[1224]: </span><span style="font-variant-ligatures: no-common-ligatures" class="">netlink_acquire got message with length 60 < 232 bytes; ignore message</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #f2f2f2" class="">Sep 08 16:46:26 beelink pluto[1224]: </span><span style="font-variant-ligatures: no-common-ligatures" class="">netlink_acquire got message with length 60 < 232 bytes; ignore message</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #f2f2f2" class="">Sep 08 16:46:26 beelink pluto[1224]: </span><span style="font-variant-ligatures: no-common-ligatures" class="">netlink_acquire got message with length 60 < 232 bytes; ignore message</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #f2f2f2" class="">Sep 08 16:46:26 beelink pluto[1224]: </span><span style="font-variant-ligatures: no-common-ligatures" class="">netlink_acquire got message with length 60 < 232 bytes; ignore message</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #f2f2f2" class="">Sep 08 16:46:39 beelink pluto[1224]: </span><span style="font-variant-ligatures: no-common-ligatures" class="">netlink_acquire got message with length 52 < 232 bytes; ignore message</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #f2f2f2" class="">Sep 08 16:46:39 beelink pluto[1224]: </span><span style="font-variant-ligatures: no-common-ligatures" class="">netlink_acquire got message with length 52 < 232 bytes; ignore message</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #f2f2f2" class="">Sep 08 16:46:39 beelink pluto[1224]: </span><span style="font-variant-ligatures: no-common-ligatures" class="">netlink_acquire got message with length 36 < 232 bytes; ignore message</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; color: rgb(180, 36, 25);" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #f2f2f2" class="">Sep 08 16:47:24 beelink pluto[1224]: </span><span style="font-variant-ligatures: no-common-ligatures" class="">EXPECTATION FAILED: c->host_pair != ((void *)0) (connection_check_ddns1() +1141 programs/pluto/initiate.c)</span></div></div><span class=""><br class="">To reproduce it, </span><span class="">I’ve setup my machine to use DHCP address, the dhcp server is slow to reply the address, so ipsec start before I’ve a valid ip. </span><div class="">If I set a static IP everything work as expected. </div><div class=""><br class=""></div><div class="">Can we set the timeout to wait for a valid DNS/connection before it fails? </div><div class=""><br class=""></div><div class="">Using libreswan v4.5 in debian buster. </div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Thanks.</div><div class=""><div class=""><span class=""><br class=""></span><span class=""><br class=""><div class="">--<br class="">Saludos / Regards / Cumprimentos<br class="">António Silva<br class=""><br class=""><br class=""><br class=""></div><br class=""></span></div></div></body></html>