Re: [strongSwan] IPSec on mobile connection with dynamic ip.

2010-07-22 Thread Martin Willi
Since, we've seen sort of a similar issue reported before On-demand DNS resolution won't help in this situation; the problem is a little different. Would you think that resolving the hostnames for both ends on dpd restart might be worth trying or are there any drawbacks to this? charon does

Re: [strongSwan] SIGILL in 4.3.5 and above

2010-07-22 Thread Tobias Brunner
I am unable to find what __fixunsdfdi is. child_cfg.c is indeed the line mentioned above. Anyone who has any ideas? __fixunsdfdi is a GCC-internal function which converts a double to an uint64. It seems that an instruction in that function raises the SIGILL on your platform. This suggests

Re: [strongSwan] SIGILL in 4.3.5 and above

2010-07-22 Thread Bjarke Istrup Pedersen
Hey again 2010/7/21 Tobias Brunner tob...@strongswan.org: Looks suspicious: +    return rekey - jitter * (random() / (RAND_MAX + 1.0)); @Tobias: What's the idea behind RAND_MAX + 1.0? Might this end in a division by zero? random() / (RAND_MAX + 1.0) returns a random floating point number

Re: [strongSwan] SIGILL in 4.3.5 and above

2010-07-22 Thread Bjarke Istrup Pedersen
2010/7/22 Tobias Brunner tob...@strongswan.org: I am unable to find what __fixunsdfdi is. child_cfg.c is indeed the line mentioned above. Anyone who has any ideas? __fixunsdfdi is a GCC-internal function which converts a double to an uint64. It seems that an instruction in that function

[strongSwan] Fwd: error in establishing an ikev1 session on pluto using certs and ocsp server .

2010-07-22 Thread depinder singh deol
hi team , i m trying to establish an ikev1 session using pluto daemon tool between two users:user1 and user2 using certs and using ocsp server for certificate revocation status verification. topology: CA / \ user1 user2 I have configured CA and ocsp

Re: [strongSwan] Fwd: error in establishing an ikev1 session on pluto using certs and ocsp server .

2010-07-22 Thread Andreas Steffen
Hello, you only show the configuration files and the output of ipsec statusall but I need the log file in order to see why the connection doesn't come up. Regards Andreas On 07/22/2010 01:47 PM, depinder singh deol wrote: -- Forwarded message -- From: depinder singh

[strongSwan] Fwd: error in establishing an ikev1 session on pluto using certs and ocsp server .

2010-07-22 Thread depinder singh deol
-- Forwarded message -- From: depinder singh deol deol.depin...@gmail.com Date: Thu, 22 Jul 2010 17:13:28 +0530 Subject: error in establishing an ikev1 session on pluto using certs and ocsp server . To: openssl-us...@openssl.org hi team , i m trying to establish an ikev1 session