Mailinglist Archive: opensuse-bugs (11332 mails)

[bugzilla_noreply@xxxxxxxxxx]

https://bugzilla.novell.com/show_bug.cgi?id=450517


           Summary: Turnpike: adding phase2 subnet causing protection fault
                    with racoon
           Product: openSUSE 11.1
           Version: RC 1
          Platform: x86-64
        OS/Version: SuSE Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Network
        AssignedTo: bnc-team-screening@xxxxxxxxxxxxxxxxxxxxxx
        ReportedBy: paca@xxxxxx
         QAContact: qa@xxxxxxx
          Found By: Community User


(This bug almost same as 450364, only with openSuse 11.1)

I'm trying to built vpn connection to ipsec-firewall by using vpnlogin.
As soon I add phase2 subnet setting to profile racoond dies 
every time I try to connect, at time when turnpike sends phase2 config to
racoond.
Dec  1 14:30:26 NAKKHL008 kernel: racoon[5762] general protection
ip:7f5437181560 sp:7fff4004c6a8 error:0 in libc-2.9.so[7f5437105000+14f000]
Without phase 2 subnet (<networks> entry) phase1 is initialized fine.

rpm versions (opensuse 11.1) are:
turnpike-0.1.1-244.60
novell-ipsec-tools-0.7.1-2.2

I'm assuming that theres something wrong how turnpike parses phase2 profile
file or how it send's profile to racoond.



Configuration files and log files are like 
### .turnpike/profiles/profile_CONNECTIONTEST.prf
<?xml version="1.0"?>
<profile name="CONNECTIONTEST">
  <gateway_ip>connectiontest.dyndns.org</gateway_ip>
  <gateway_type>Standard IPsec gateway</gateway_type>
  <certificate>mycert.pfx</certificate>
  <policies>
    <phase1>
      <proposals>
        <entry mode="MM" dhgroup="dh2" authmethod="X.509"/>
      </proposals>
    </phase1>
    <phase2>
      <proposals>
        <entry pfsgroup="off"/>
      </proposals>
      <networks>
        <entry network="192.168.0.0" mask="255.255.255.0"/>
      </networks>
    </phase2>
  </policies>
</profile>


### ~/.turnpike/log.txt
2008-12-01 14:30:22: INFO: Novell VPN Client for Linux GUI Startup ....
2008-12-01 14:30:26: INFO: server_ip_addr = 84.253.213.7
, source_ip = 172.21.89.169
2008-12-01 14:30:26: INFO: Successfully sent message type   305 to admin port
2008-12-01 14:30:26: INFO: peek length = 8, Peeked length = 8
2008-12-01 14:30:26: INFO: Received Length= 8  
2008-12-01 14:30:26: INFO:  The Received Buffer length is 8 ...
2008-12-01 14:30:26: INFO: Successfully sent message type   303 to admin port
2008-12-01 14:30:26: WARNING: Connection closed. May be server closed this
connection! 


### /var/sys/messages
Dec  1 14:30:26 NAKKHL008 racoon: WARNING: /etc/racoon/racoon.conf:137: "}"
b=0, dh_group=1
Dec  1 14:30:26 NAKKHL008 racoon: WARNING:
/home/petri/.turnpike/racoon.conf:42: "}" b=0, dh_group=2
Dec  1 14:30:26 NAKKHL008 racoon: WARNING:
/home/petri/.turnpike/racoon.conf:42: "}" b=2, dh_group=2
Dec  1 14:30:26 NAKKHL008 racoon: WARNING:
/home/petri/.turnpike/racoon.conf:42: "}" b=2, dh_group=2
Dec  1 14:30:26 NAKKHL008 racoon: WARNING:
/home/petri/.turnpike/racoon.conf:42: "}" b=2, dh_group=2
Dec  1 14:30:26 NAKKHL008 racoon: NOTIFY: NAT-T is enabled, autoconfiguring
ports
Dec  1 14:30:26 NAKKHL008 kernel: racoon[5762] general protection
ip:7f5437181560 sp:7fff4004c6a8 error:0 in libc-2.9.so[7f5437105000+14f000]


-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.