https://bugzilla.novell.com/show_bug.cgi?id=450364 Summary: Turnpike: adding phase2 subnet causing protection fault with racoon Product: openSUSE 11.0 Version: Final Platform: x86-64 OS/Version: openSUSE 11.0 Status: NEW Severity: Major Priority: P5 - None Component: Network AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: paca@sci.fi QAContact: qa@suse.de Found By: Community User I'm trying to built vpn connection to ipsec-firewall by using vpnlogin. As soon I add phase2 subnet setting to profile racoond dies every time I try to connect, at time when turnpike sends phase2 config to racoond. Dec 1 07:48:04 linux-tq04 kernel: racoon[3930] general protection ip:7f714f9c8d30 sp:7fff58513ba8 error:0 in libc-2.8.so[7f714f94b000+14f000] Without phase 2 subnet (<networks> entry) phase1 is initialized fine. rpm versions are: turnpike-0.1.1-209.1 novell-ipsec-tools-0.6.3-183.1 ######## Failing profile is like: <?xml version="1.0"?> <profile name="CONNECTIONTEST"> connectiontest.dyndns.org Standard IPsec gateway <certificate>mycert.pfx</certificate> <policies> <phase1> <proposals> <entry mode="MM" dhgroup="dh2" authmethod="X.509"/> </proposals> </phase1> <phase2> <proposals> <entry pfsgroup="off"/> </proposals> <networks> <entry network="192.168.0.0" mask="255.255.255.0"/> </networks> </phase2> </policies> </profile> ###########Syslog shows: Dec 1 07:48:04 linux-tq04 racoon: DEBUG: configuring default isakmp port. Dec 1 07:48:04 linux-tq04 racoon: NOTIFY: NAT-T is enabled, autoconfiguring ports Dec 1 07:48:04 linux-tq04 racoon: DEBUG: 6 addrs are configured successfully Dec 1 07:48:04 linux-tq04 racoon: INFO: 127.0.0.1[500] used as isakmp port (fd=8) Dec 1 07:48:04 linux-tq04 racoon: INFO: 127.0.0.1[500] used for NAT-T Dec 1 07:48:04 linux-tq04 racoon: INFO: 127.0.0.1[4500] used as isakmp port (fd=9) Dec 1 07:48:04 linux-tq04 racoon: INFO: 127.0.0.1[4500] used for NAT-T Dec 1 07:48:04 linux-tq04 racoon: INFO: 127.0.0.2[500] used as isakmp port (fd=10) Dec 1 07:48:04 linux-tq04 racoon: INFO: 127.0.0.2[500] used for NAT-T Dec 1 07:48:04 linux-tq04 racoon: INFO: 127.0.0.2[4500] used as isakmp port (fd=11) Dec 1 07:48:04 linux-tq04 racoon: INFO: 127.0.0.2[4500] used for NAT-T Dec 1 07:48:04 linux-tq04 racoon: INFO: 85.131.96.167[500] used as isakmp port (fd=12) Dec 1 07:48:04 linux-tq04 racoon: INFO: 85.131.96.167[500] used for NAT-T Dec 1 07:48:04 linux-tq04 racoon: INFO: 85.131.96.167[4500] used as isakmp port (fd=13) Dec 1 07:48:04 linux-tq04 racoon: INFO: 85.131.96.167[4500] used for NAT-T Dec 1 07:48:04 linux-tq04 kernel: racoon[3930] general protection ip:7f714f9c8d30 sp:7fff58513ba8 error:0 in libc-2.8.so[7f714f94b000+14f000] ########### .turpike/log.txt shows: 2008-12-01 07:47:54: INFO: Novell VPN Client for Linux GUI Startup .... 2008-12-01 07:48:04: INFO: server_ip_addr = 84.253.213.7 , source_ip = 85.131.96.167 2008-12-01 07:48:04: INFO: Successfully sent message type 305 to admin port 2008-12-01 07:48:04: INFO: peek length = 8, Peeked length = 8 2008-12-01 07:48:04: INFO: Received Length= 8 2008-12-01 07:48:04: INFO: The Received Buffer length is 8 ... 2008-12-01 07:48:04: INFO: Successfully sent message type 303 to admin port 2008-12-01 07:48:04: WARNING: Connection closed. May be server closed this connection! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.