[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

This bug was fixed in the package strongswan - 5.3.5-1ubuntu4.2 --- strongswan (5.3.5-1ubuntu4.2) yakkety; urgency=medium * d/p/ikev2-Only-add-NAT-D-notifies-to-DPDs-as-initiator.patch: fix issue related to DPD vs iOS10 (LP: #1687711) -- Christian Ehrhardt

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

This bug was fixed in the package strongswan - 5.3.5-1ubuntu3.2 --- strongswan (5.3.5-1ubuntu3.2) xenial; urgency=medium * d/p/ikev2-Only-add-NAT-D-notifies-to-DPDs-as-initiator.patch: fix issue related to DPD vs iOS10 (LP: #1687711) -- Christian Ehrhardt

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

On Thu, May 18, 2017 at 2:21 AM, Simon Déziel <1687...@bugs.launchpad.net> wrote: > With a Yakkety server running 5.3.5-1ubuntu4.1 and an iOS 10.3.2 client, I > can reproduce the issue. > The package from -proposed (5.3.5-1ubuntu4.2) fixes the issue, thanks > Christian! > Thank you so much

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

With a Yakkety server running 5.3.5-1ubuntu4.1 and an iOS 10.3.2 client, I can reproduce the issue. The package from -proposed (5.3.5-1ubuntu4.2) fixes the issue, thanks Christian! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

Re: [Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

On 2017-05-17 01:35 AM, ChristianEhrhardt wrote: > Thanks Simon, do you (or dguido) have a chance to test on Yakkety as > well or would that be too much setup effort? I don't have any (interest in) Yakkety but I'll give it a try since you took the time to prepare a SRU. Simon -- You received

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

Also found no other things in Xenial and autopkgtests are fine on X Seting v-done for xenial, but yakkety has to be checked one with the right devices (and setup). ** Tags added: verification-done-xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

Thanks Simon, do you (or dguido) have a chance to test on Yakkety as well or would that be too much setup effort? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1687711 Title: strongSwan 5.3.5 has a

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

5.3.5-1ubuntu3.2 from xenial-proposed fixes the issue. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1687711 Title: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+ To manage

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

Hello dguido, or anyone else affected, Accepted strongswan into yakkety-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/strongswan/5.3.5-1ubuntu4.2 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

Ok, all tests succeeded as well, so I'd think this is good for SRU - so I pushed it to unapproved for Xenial and Yakkety. Please help me testing -proposed once it appears there. Note (to myself) - related bileto tickets: https://bileto.ubuntu.com/#/ticket/2752

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

Updated SRU template, matching that we intend to fix the issue now and not as initially requested backport the full newer strongswan. ** Description changed: + [Impact] + + * iOS10+/MacOS10+ devices fail at dead peer detection and re-establish +the connection over and over + + *

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

Thanks for the check, I also couldn't find anything too obviously broken. I'm prepping Yakkety as well now and if things go well would put it to the SRU queue later. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

** Tags added: server-next ** Changed in: strongswan (Ubuntu Xenial) Status: Confirmed => Triaged ** Changed in: strongswan (Ubuntu Yakkety) Status: Confirmed => Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

I was able to reproduce the problematic scenario with an iOS 10.3.1 client and I'm happy to say that 5.3.5-1ubuntu3.2 [*] fixes it. Thanks Christian! *: https://launchpad.net/~ci-train-ppa-service/+archive/ubuntu/2752 -- You received this bug notification because you are a member of Ubuntu

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

** Changed in: strongswan (Ubuntu Xenial) Status: New => Confirmed ** Changed in: strongswan (Ubuntu Yakkety) Status: New => Confirmed ** Changed in: strongswan (Ubuntu Xenial) Importance: Undecided => Medium ** Changed in: strongswan (Ubuntu Yakkety) Importance: Undecided

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

Thanks, I will test the package you provided soon and get back to you with the results. In the meantime, we have setup Algo to pull in strongSwan packages from 17.04. This has not caused any issues: https://github.com/trailofbits/algo/pull/515/files -- You received this bug notification because

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

The following is a bit of a quick shot but maybe good for your to verify. I backported the change I identified to Xenial (eventually Y is needed as well). The package starts building in: https://launchpad.net/~ci-train-ppa-service/+archive/ubuntu/2752 If you could try and verify if that fixes

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

We might try if [1] applies and fixes the issue without all the major changes that 5.5.1 would imply. [1]: https://wiki.strongswan.org/projects/strongswan/repository/revisions/33241871a82a0c374128373e47380be60f0431fa/diff -- You received this bug notification because you are a member of Ubuntu

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

I'm only now reading into details, but in general just taking 5.5.1 can be a backport but not easily an SRU. We have to check if there is a way to find a minimal amount of changes to SRU them. ** Also affects: strongswan (Ubuntu Yakkety) Importance: Undecided Status: New ** Also

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

I can confirm that the `strongswan-5.5.1-1ubuntu3` source package from 17.04 compiles without issue on 16.04. There is one missing build-dep `libsystemd-dev` however. I've experienced no functionality or stability issues so far. -- You received this bug notification because you are a member of

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

** Description changed: strongSwan is effectively incompatible with iOS 10+ and macOS 10.11+ devices. Dead peer detection does not work for these devices and they continually re-establish security associations (SAs) as a result. Please see the issues described in further detail below:

[Bug 1687711] Re: strongSwan 5.3.5 has a known incompatibility with iOS/macOS 10+

** Description changed: strongSwan is effectively incompatible with iOS 10+ and macOS 10.11+ devices. Dead peer detection does not work for these devices and they continually re-establish security associations (SAs) as a result. Please see the issues described in further detail below: