Bug 38817

Summary:	Ipsec + linux-2.4.22-gentoo-r5 dont work together
Product:	Gentoo Linux	Reporter:	cmueller <cmueller>
Component:	[OLD] Core system	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	x86
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description cmueller 2004-01-20 06:31:36 UTC

After I decided to switch from linux-2.4.22-gentoo-r4 to linux-2.4.22-gentoo-r5 I got the following problem.

A ipsec-tunnel that worked fine for over a year stopped working.

I monitored the communication between the two ipsec hosts with tcpdump.
And had a look in the /var/log/auth.log =>

I think the IKE works fine [sent MR3, ISAKMP SA established], but after that something goes wrong in the quickmode. A few second later I get a [ignoring Delete SA payload:
 IPSEC SA not found (maybe expired)].

60 seconds later ipsec rekeys.

Reproducible: Always
Steps to Reproduce:
1. Start IPSEC = ipsec setup restart
2.
3.

Actual Results:  
IKE Phase 1 (Main Mode) works fine.
IKE Phase 2 (Quick Mode) gets initiated
Then i get a "ignoring Delete SA payload:
IPSEC SA not found (maybe expired)]." in the auth.log and 60 sek. later pluto rekeys

Expected Results:  
IKE Phase 2 should accept the SA and work correct

# ipsec setup --version    
ipsec setup super-freeswan-1.99_kb4

If I switch back to linux-2.4.22-gentoo-r4 every thing works fine

Comment 1 cmueller 2004-01-20 06:33:21 UTC


*** This bug has been marked as a duplicate of 38814 ***