[Kernel-packages] [Bug 1828035] Re: StrongSwan with GCM and large packet sizes produces unstable behavior

2019-07-09 Thread Frank Heimes
Thx for testing and confirming - this kernel (4.15.0-55) will soon be
rolled out and copied from the proposed to the update pocket, which then
will fix this issue - hence changing status to Fix Committed.

** Changed in: linux (Ubuntu)
   Status: Confirmed => Fix Committed

** Changed in: ubuntu-z-systems
   Status: Confirmed => Fix Committed

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1828035

Title:
  StrongSwan with GCM and large packet sizes produces unstable behavior

Status in Ubuntu on IBM z Systems:
  Fix Committed
Status in linux package in Ubuntu:
  Fix Committed
Status in strongswan package in Ubuntu:
  Incomplete

Bug description:
  StrongSwan with GCM and large packet sizes produces unstable behavior when 
used in Linux native environment. 
   
  ---uname output---
  Linux ubu01 4.15.0-42-generic #45-Ubuntu SMP Thu Nov 15 19:29:11 UTC 2018 
s390x s390x s390x GNU/Linux
   
  Machine Type = 3906 / M04 (z14), LPAR (dedicated) 
   
  ---Debugger---
  A debugger is not configured
   
  ---Steps to Reproduce---
  On two separate machines (Linux native), install StrongSwan and on both 
machines, configure the encryption with aes128gcm8 for IPsec.

  Then run the following command from one of the machine:

  ```
  $# ping  -s 1024
  ```

  Small packet sizes are working as expected. However, anything large (around 
1024 bytes or more) are sometimes returning wrong values, or the packets are 
getting lost. This problem does not occur for ciphers not involving GCM. 
   
  Userspace tool common name: StrongSwan 
   
  The userspace tool has the following bit modes: both 

  Userspace package: StrongSwan

  Userspace tool obtained from project website:  na 
   
  -Attach ltrace and strace of userspace application.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1828035/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp


[Kernel-packages] [Bug 1828035] Re: StrongSwan with GCM and large packet sizes produces unstable behavior

2019-07-05 Thread Frank Heimes
According to LP 1832623 (especially
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1832623/comments/6) the
latest kernel available in bionic-proposed (4.15.0-55) includes the
'gcm-aes-s390' patch and is ready for test.

See also bionic kernel changelog:
https://launchpad.net/ubuntu/+source/linux/+changelog and search for
'gcm-aes-s390' or 1832623)

** Changed in: ubuntu-z-systems
   Status: Incomplete => Confirmed

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1828035

Title:
  StrongSwan with GCM and large packet sizes produces unstable behavior

Status in Ubuntu on IBM z Systems:
  Confirmed
Status in linux package in Ubuntu:
  Confirmed
Status in strongswan package in Ubuntu:
  Incomplete

Bug description:
  StrongSwan with GCM and large packet sizes produces unstable behavior when 
used in Linux native environment. 
   
  ---uname output---
  Linux ubu01 4.15.0-42-generic #45-Ubuntu SMP Thu Nov 15 19:29:11 UTC 2018 
s390x s390x s390x GNU/Linux
   
  Machine Type = 3906 / M04 (z14), LPAR (dedicated) 
   
  ---Debugger---
  A debugger is not configured
   
  ---Steps to Reproduce---
  On two separate machines (Linux native), install StrongSwan and on both 
machines, configure the encryption with aes128gcm8 for IPsec.

  Then run the following command from one of the machine:

  ```
  $# ping  -s 1024
  ```

  Small packet sizes are working as expected. However, anything large (around 
1024 bytes or more) are sometimes returning wrong values, or the packets are 
getting lost. This problem does not occur for ciphers not involving GCM. 
   
  Userspace tool common name: StrongSwan 
   
  The userspace tool has the following bit modes: both 

  Userspace package: StrongSwan

  Userspace tool obtained from project website:  na 
   
  -Attach ltrace and strace of userspace application.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1828035/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp


[Kernel-packages] [Bug 1828035] Re: StrongSwan with GCM and large packet sizes produces unstable behavior

2019-06-28 Thread Frank Heimes
A rough outlook is: in ~ less than 2 weeks - it's planned to come with the next 
proposed kernel.
(If everything runs smoothly with the kernel SRU, but it looks good - there is 
already one Ack.)

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1828035

Title:
  StrongSwan with GCM and large packet sizes produces unstable behavior

Status in Ubuntu on IBM z Systems:
  Incomplete
Status in linux package in Ubuntu:
  Confirmed
Status in strongswan package in Ubuntu:
  Incomplete

Bug description:
  StrongSwan with GCM and large packet sizes produces unstable behavior when 
used in Linux native environment. 
   
  ---uname output---
  Linux ubu01 4.15.0-42-generic #45-Ubuntu SMP Thu Nov 15 19:29:11 UTC 2018 
s390x s390x s390x GNU/Linux
   
  Machine Type = 3906 / M04 (z14), LPAR (dedicated) 
   
  ---Debugger---
  A debugger is not configured
   
  ---Steps to Reproduce---
  On two separate machines (Linux native), install StrongSwan and on both 
machines, configure the encryption with aes128gcm8 for IPsec.

  Then run the following command from one of the machine:

  ```
  $# ping  -s 1024
  ```

  Small packet sizes are working as expected. However, anything large (around 
1024 bytes or more) are sometimes returning wrong values, or the packets are 
getting lost. This problem does not occur for ciphers not involving GCM. 
   
  Userspace tool common name: StrongSwan 
   
  The userspace tool has the following bit modes: both 

  Userspace package: StrongSwan

  Userspace tool obtained from project website:  na 
   
  -Attach ltrace and strace of userspace application.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1828035/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp


[Kernel-packages] [Bug 1828035] Re: StrongSwan with GCM and large packet sizes produces unstable behavior

2019-06-27 Thread Frank Heimes
Since there is a kernel SRU request in progress to include that patch anyway,
( addressed in LP 1832623 '[UBUNTU] kernel: Fix gcm-aes-s390 wrong 
scatter-gather list processing' - 
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1832623 )
I suggest to wait until this hits -proposed and is ready for verification - if 
that is okay for you?!

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1828035

Title:
  StrongSwan with GCM and large packet sizes produces unstable behavior

Status in Ubuntu on IBM z Systems:
  Incomplete
Status in linux package in Ubuntu:
  Confirmed
Status in strongswan package in Ubuntu:
  Incomplete

Bug description:
  StrongSwan with GCM and large packet sizes produces unstable behavior when 
used in Linux native environment. 
   
  ---uname output---
  Linux ubu01 4.15.0-42-generic #45-Ubuntu SMP Thu Nov 15 19:29:11 UTC 2018 
s390x s390x s390x GNU/Linux
   
  Machine Type = 3906 / M04 (z14), LPAR (dedicated) 
   
  ---Debugger---
  A debugger is not configured
   
  ---Steps to Reproduce---
  On two separate machines (Linux native), install StrongSwan and on both 
machines, configure the encryption with aes128gcm8 for IPsec.

  Then run the following command from one of the machine:

  ```
  $# ping  -s 1024
  ```

  Small packet sizes are working as expected. However, anything large (around 
1024 bytes or more) are sometimes returning wrong values, or the packets are 
getting lost. This problem does not occur for ciphers not involving GCM. 
   
  Userspace tool common name: StrongSwan 
   
  The userspace tool has the following bit modes: both 

  Userspace package: StrongSwan

  Userspace tool obtained from project website:  na 
   
  -Attach ltrace and strace of userspace application.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1828035/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp


[Kernel-packages] [Bug 1828035] Re: StrongSwan with GCM and large packet sizes produces unstable behavior

2019-05-29 Thread Frank Heimes
** Changed in: ubuntu-z-systems
   Status: Confirmed => Incomplete

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1828035

Title:
  StrongSwan with GCM and large packet sizes produces unstable behavior

Status in Ubuntu on IBM z Systems:
  Incomplete
Status in linux package in Ubuntu:
  Confirmed
Status in strongswan package in Ubuntu:
  Incomplete

Bug description:
  StrongSwan with GCM and large packet sizes produces unstable behavior when 
used in Linux native environment. 
   
  ---uname output---
  Linux ubu01 4.15.0-42-generic #45-Ubuntu SMP Thu Nov 15 19:29:11 UTC 2018 
s390x s390x s390x GNU/Linux
   
  Machine Type = 3906 / M04 (z14), LPAR (dedicated) 
   
  ---Debugger---
  A debugger is not configured
   
  ---Steps to Reproduce---
  On two separate machines (Linux native), install StrongSwan and on both 
machines, configure the encryption with aes128gcm8 for IPsec.

  Then run the following command from one of the machine:

  ```
  $# ping  -s 1024
  ```

  Small packet sizes are working as expected. However, anything large (around 
1024 bytes or more) are sometimes returning wrong values, or the packets are 
getting lost. This problem does not occur for ciphers not involving GCM. 
   
  Userspace tool common name: StrongSwan 
   
  The userspace tool has the following bit modes: both 

  Userspace package: StrongSwan

  Userspace tool obtained from project website:  na 
   
  -Attach ltrace and strace of userspace application.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1828035/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp


[Kernel-packages] [Bug 1828035] Re: StrongSwan with GCM and large packet sizes produces unstable behavior

2019-05-08 Thread Frank Heimes
** Changed in: ubuntu-z-systems
   Status: Triaged => Confirmed

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1828035

Title:
  StrongSwan with GCM and large packet sizes produces unstable behavior

Status in Ubuntu on IBM z Systems:
  Confirmed
Status in linux package in Ubuntu:
  Confirmed
Status in strongswan package in Ubuntu:
  Incomplete

Bug description:
  StrongSwan with GCM and large packet sizes produces unstable behavior when 
used in Linux native environment. 
   
  ---uname output---
  Linux ubu01 4.15.0-42-generic #45-Ubuntu SMP Thu Nov 15 19:29:11 UTC 2018 
s390x s390x s390x GNU/Linux
   
  Machine Type = 3906 / M04 (z14), LPAR (dedicated) 
   
  ---Debugger---
  A debugger is not configured
   
  ---Steps to Reproduce---
  On two separate machines (Linux native), install StrongSwan and on both 
machines, configure the encryption with aes128gcm8 for IPsec.

  Then run the following command from one of the machine:

  ```
  $# ping  -s 1024
  ```

  Small packet sizes are working as expected. However, anything large (around 
1024 bytes or more) are sometimes returning wrong values, or the packets are 
getting lost. This problem does not occur for ciphers not involving GCM. 
   
  Userspace tool common name: StrongSwan 
   
  The userspace tool has the following bit modes: both 

  Userspace package: StrongSwan

  Userspace tool obtained from project website:  na 
   
  -Attach ltrace and strace of userspace application.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1828035/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp


[Kernel-packages] [Bug 1828035] Re: StrongSwan with GCM and large packet sizes produces unstable behavior

2019-05-08 Thread Christian Ehrhardt 
Thanks Tobias for the advise, adding a kernel Task to pull in the kernel
team as well (confirmed to stop the bot from asking for logs).

@bugproxy:
"configure the encryption with aes128gcm8 for IPsec" can probably be done in 
more than one way. To avoid wasting effort could you just provide the config 
files you used on both ends
This is -not- overriding the question of xnox if it works in a newer strongswan.

@bugproxy:
As the kernel might be important (see the comment above), another check is to 
verify if the same occurs with the HWE kernel "linux-generic-hwe-18.04" 
currently at 4.18.0.18.68.
Furthermore you should try 5.1 from [1]
This is -not- overriding the question of xnox if it works in a newer strongswan 
either.

[1]: https://kernel.ubuntu.com/~kernel-ppa/mainline/v5.1/

** Also affects: linux (Ubuntu)
   Importance: Undecided
   Status: New

** Changed in: linux (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1828035

Title:
  StrongSwan with GCM and large packet sizes produces unstable behavior

Status in Ubuntu on IBM z Systems:
  Triaged
Status in linux package in Ubuntu:
  Confirmed
Status in strongswan package in Ubuntu:
  Incomplete

Bug description:
  StrongSwan with GCM and large packet sizes produces unstable behavior when 
used in Linux native environment. 
   
  ---uname output---
  Linux ubu01 4.15.0-42-generic #45-Ubuntu SMP Thu Nov 15 19:29:11 UTC 2018 
s390x s390x s390x GNU/Linux
   
  Machine Type = 3906 / M04 (z14), LPAR (dedicated) 
   
  ---Debugger---
  A debugger is not configured
   
  ---Steps to Reproduce---
  On two separate machines (Linux native), install StrongSwan and on both 
machines, configure the encryption with aes128gcm8 for IPsec.

  Then run the following command from one of the machine:

  ```
  $# ping  -s 1024
  ```

  Small packet sizes are working as expected. However, anything large (around 
1024 bytes or more) are sometimes returning wrong values, or the packets are 
getting lost. This problem does not occur for ciphers not involving GCM. 
   
  Userspace tool common name: StrongSwan 
   
  The userspace tool has the following bit modes: both 

  Userspace package: StrongSwan

  Userspace tool obtained from project website:  na 
   
  -Attach ltrace and strace of userspace application.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1828035/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp