[prev in list] [next in list] [prev in thread] [next in thread] 

List:       strongswan-users
Subject:    [strongSwan] no answer from other host makes strongswan stop
From:       andreas.steffen () strongswan ! org (Andreas Steffen)
Date:       2007-01-24 16:48:26
Message-ID: 45B78DDA.1020504 () strongswan ! org
[Download RAW message or body]

Hi Henry,

Martin Willi, our IKEv2 architect is currently on military duty
drafted by the Swiss Army. After his return on January 31 he
is going to answer your questions concerning the stroke-thread.

Best regards

Andreas

Henry Nilsson wrote:
> Hi,
> 
> If a ike-connection is started against a server that either not respond at
> all or either does not support the ikev2-protocol, strongswan will try to
> retransmit the ike_init_sa-message up to max-retransmit, and if still no
> response from the server,  it will give up. The problem is that when giving
> up never results in a return-signal to the stroke-thread, that makes it wait
> forever for a return-signal, hanging the unix-socket for the stroke
> interface.
> 
> snippet from ike_sa.c looks like this:
> DBG1(DBG_IKE, "giving up after %d retransmits, deleting IKE_SA",
>              transmitted - 1);
>         dpd_detected(this);
>         return DESTROY_ME;
> 
> 
> The problem is that SIG(IKE_UP_FAILED, "") is never signaled back to the
> stroke-thread.
> 
> Best regards,
> Henry

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org 

Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3417 bytes
Desc: S/MIME Cryptographic Signature
Url : https://lists.strongswan.org/pipermail/users/attachments/20070124/f4081602/attachment.bin 

[prev in list] [next in list] [prev in thread] [next in thread]