On 25 September 2013 14:41, LEVAI Daniel <[email protected]> wrote: > Hi! > > I'm trying to setup StrongSwan (oh, the pain...) to iked(8) IPsec. When > trying to bring up the connection from the Linux end (ipsec up > <connection>), the iked(8) at the OpenBSD (5.3-stable) endpoint > segfaults. I'm trying to use certs and public keys for authentication > for this host-to-host ESP tunnel connection. > For the life of me I can not get a coredump from the ikev2 program, but > attaching gdb to its PID won't give me a bt either because it can't seem > to load the symbol table. I've recompiled iked from sources with > CFLAGS=-g and without stripping, but still, no luck. >
use "CFLAGS=-g -DDEBUG" to disable chroot and generate a core dump. > The network looks like this: > [ Linux StrongSwan ] <--> [ NAT gw <remote_ip> ]O--Internetz--O[ <firefly_ip> > ] > | | > `========================== IPsec IKEv2 ======================' > > Here is the output of iked -dvv from the start until the sig11. > I'm sorry about the "anonimization", if it confuses the reader I'll > gladly elaborate. > you can also try "iked -dvvT" and see if that works.
