---- Original message ---- >Date: Thu, 14 Sep 2006 22:24:09 -0400 >From: Craig Shue <[EMAIL PROTECTED]> >Subject: ISAKMPD dies during phase 1 >To: [email protected] > >Greetings, > >I am attempting to have two OpenBSD boxes communicate via IPSec. I have >configured them to use ISAKMPD to negotiate the connection, using PSK. >Unfortunately, isakmpd on one of the boxes dies in phase 1's >negotiation. For both machines, I am using OpenBSD 3.8 on an i386 >architecture. > >I have recompiled the kernel and userland from source on the machine >experiencing isakmp death. I am wanting to modify the isakmp source to >log some additional information. However, because of the abnormal >termination, I moved my modified code out of the way, updated via CVS, >and did the "make obj && make depend && make && make install" steps. >Even then, it still dies. >
first, if possible, upgrade to 3.9. it takes ~20 minutes per machine. second, check out http://www.securityfocus.com/infocus/1859 and see if you can get it working. there is a reason that using isakmpd.conf is becoming obsolete: it is very much error prone and annoying to debug.

