[Bug 450517] Turnpike: adding phase2 subnet causing protection fault with racoon
http://bugzilla.novell.com/show_bug.cgi?id=450517 User paca@sci.fi added comment http://bugzilla.novell.com/show_bug.cgi?id=450517#c17 Petri Asikainen <paca@sci.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED Info Provider|paca@sci.fi | --- Comment #17 from Petri Asikainen <paca@sci.fi> 2009-06-24 05:41:47 MDT --- I made some testing: I copied files racoon.conf, usercert.pem and userkeyunenc.pem in directory ~/.turnpike created by vpnlogin. Then I started racoond with -d -F -f ~/turnpike/racoon.conf Started connection with "racoonctl vpn-connect 84.253.213.7 Firewall thinks that phase1 is done but this is what racoond prints out: 2009-06-24 14:35:41: INFO: Selected NAT-T version: RFC 3947 2009-06-24 14:35:41: INFO: Hashing 84.253.213.7[500] with algo #1 2009-06-24 14:35:41: INFO: Hashing 84.253.206.88[500] with algo #1 2009-06-24 14:35:41: INFO: Adding remote and local NAT-D payloads. 2009-06-24 14:35:41: INFO: Hashing 84.253.206.88[500] with algo #1 2009-06-24 14:35:41: INFO: NAT-D payload #0 verified 2009-06-24 14:35:41: INFO: Hashing 84.253.213.7[500] with algo #1 2009-06-24 14:35:41: INFO: NAT-D payload #1 verified 2009-06-24 14:35:41: INFO: NAT not detected 2009-06-24 14:35:41: WARNING: ignore INITIAL-CONTACT notification, because it is only accepted after phase1. 2009-06-24 14:35:41: ERROR: no peer's CERT payload found. 2009-06-24 14:35:41: WARNING: Short payload 2009-06-24 14:36:21: ERROR: ignore information because ISAKMP-SAhas not been established yet. 2009-06-24 14:36:21: ERROR: unknown Informational exchange received. 2009-06-24 14:37:21: ERROR: phase1 negotiation failed due to time up. eb311177b91a9862:eb9b17bb9ed58cc9 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com