In src/charon-nm/nm/nm_service.c, on line 542 in connect_(), when ike_cfg_create() is called, FRAGMENTATION_NO is passed:
https://git.strongswan.org/?p=strongswan.git;a=blob;f=src/charon-nm/nm/nm_service.c;h=c4dd9e05b6c9d62ffc2c69e5820d291df2dd642a;hb=HEAD#l542 Should this be FRAGMENTATION_YES instead, now that "fragmentation=yes" is the default? In other words, is this an oversight, or is it intentionally different (and if so, why)? If I change that to FRAGMENTATION_YES, I can successfully connect when IP fragments are blocked, which I cannot do with FRAGMENTATION_NO. -- Richard _______________________________________________ Dev mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/dev
