<div dir="ltr"><div>Nice work.</div><div><br></div><div>> I have noticed today (after having figured out how to connect
IPv4-only from Windows 10) that I lose connectivity<br>
with github libreswan, while I still had it with libreswan-4.9
from tarball.</div><div><br></div><div>When you say "lose" connectivity, do you mean it never connects or dies after a short while?<br></div><div><br></div><div><a href="https://github.com/libreswan/libreswan/commit/bc47dcf87733484f5701b02212c3015a711ca1a9">https://github.com/libreswan/libreswan/commit/bc47dcf87733484f5701b02212c3015a711ca1a9</a> added code to check the content of the CP payload so, presumably, microsoft is sending something pluto didn't expect.</div><div><br></div><div>Was there an error related to CP in the logs? And if possible try a test run with debug=all enabled so that the CP payloads are captured and put that in a bug.<br></div><div><br></div><div><br></div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, 31 Oct 2022 at 15:07, Mirsad Goran Todorovac <<a href="mailto:mirsad.todorovac@alu.unizg.hr">mirsad.todorovac@alu.unizg.hr</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<p>Hi all,</p>
<p>I have noticed today (after having figured out how to connect
IPv4-only from Windows 10) that I lose connectivity<br>
with github libreswan, while I still had it with libreswan-4.9
from tarball.</p>
<p>I felt inspired and bisect gave this (at this commit I lost IPv4
Win 10 connectivity):</p>
<p><font face="monospace">git bisect good
e75c5ce30d7b6e5311dd05a4d0512a5f61add78f<br>
# bad: [4e1ceb32c64b8b077c41c538e39c5b6252b826b6] connections:
pass struct connection_end into extract_end()<br>
git bisect bad 4e1ceb32c64b8b077c41c538e39c5b6252b826b6<br>
# bad: [bc47dcf87733484f5701b02212c3015a711ca1a9] ikev2: during
IKE_AUTH parse IKEv2 CP requests<br>
git bisect bad bc47dcf87733484f5701b02212c3015a711ca1a9<br>
# good: [823443d6c796340128720a295c99f7eacae09d67] connections:
(more) use ...->host->config rather than
...->config->host<br>
git bisect good 823443d6c796340128720a295c99f7eacae09d67<br>
# first bad commit: [bc47dcf87733484f5701b02212c3015a711ca1a9]
ikev2: during IKE_AUTH parse IKEv2 CP requests<br>
root@magrf:~/libreswan#</font></p>
<p><font face="monospace">Windows specs:</font></p>
<p><font face="monospace"><img src="cid:1842f8ca5a76959c43b1" alt=""><br>
</font></p>
<p><font face="monospace">VPN server is on Debian 11 Bullseye and
stock kernel, on a rather old development can.</font><br>
<font face="monospace"></font></p>
<p>Hope this helps.</p>
<p>Kind regards,<br>
Mirsad<br>
</p>
<pre cols="72">--
Mirsad Todorovac
Sistem inženjer
Grafički fakultet | Akademija likovnih umjetnosti
Sveučilište u Zagrebu
--
System engineer
Faculty of Graphic Arts | Academy of Fine Arts
University of Zagreb, Republic of Croatia
tel. +385 (0)1 3711 451
mob. +385 91 57 88 355</pre>
</div>
</blockquote></div>