Hi,

We have a peculiar issue after porting Strongswan version 4.6.2 to our target 
platform. Overall the functionality seems to be fine, except for some 
retransmission issues.

The retransmission of IKE_SA_INIT messages or periodic DPD polling does not 
happen at all. IKE_SA_INIT message is sent once and it is not retransmitted. 
Similarly DPD messages are not retransmitted at all. We opened up traces in 
scheduler.c. The job seems to be created and added. But it never seems to get 
fired at all.

All strongswan.conf parameters (including the 3 retransmission related 
parameters) are set to default values. We earlier suspected that there is some 
issue with the Job scheduler itself. But latter on we found that SA rekeying 
happens properly at the desired timeout values. So this eliminates any porting 
related issues or issues with the Job scheduler.

We have ported the same strongswan version to a Fedora Linux box and everything 
works fine there for the same ipsec configuration.

Any comments/help on this would be highly appreciated.

Regards
Naveen



Please do not print this email unless it is absolutely necessary. 

The information contained in this electronic message and any attachments to 
this message are intended for the exclusive use of the addressee(s) and may 
contain proprietary, confidential or privileged information. If you are not the 
intended recipient, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately and destroy all copies of this message and 
any attachments. 

WARNING: Computer viruses can be transmitted via email. The recipient should 
check this email and any attachments for the presence of viruses. The company 
accepts no liability for any damage caused by any virus transmitted by this 
email. 

www.wipro.com
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to