<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Consolas, monospace" size="2">
<div>The change log says it was fixed in V2.4.0, but I’m getting it from 2.6.21.</div>
<div> </div>
<div> </div>
<div> </div>
<div>v2.4.0 (Sep 12, 2005)</div>
<div>* NAT-T support for KLIPS on 2.6 (Sponsored by Astaro)</div>
<div>* Additional Cipher support with KLIPS on 2.6 (Sponsored by Astaro)</div>
<div>* Fix for NAT-T/PSK rekey (Ulrich @ Astaro)</div>
<div>* Delete _updown.c and _updown.posix versions as they were obsolete</div>
<div>* Fixes for aggressive mode and policy mode</div>
<div>* Various bugfixes as reported on <a href="http://bugs.openswan.org/">http://bugs.openswan.org/</a></div>
<div> #201 pluto not accepting negotiations on port 500 after port floating to 4500</div>
<div> #249 two default routes confuses scripts</div>
<div> #261 2 RW's w/DPD behind a NAT kick each other off at rekey time</div>
<div> #267 pluto crashes on inbound X.509 roadwarrior</div>
<div> #269 informational crasher in demux.c</div>
<div> #301 kernel_netkey.c lists invalid ESP algorithm</div>
<div> #302 pluto assumes it has 3DES</div>
<div> #305 passert_fail (pred_str=0x80b88e3 "st->st_suspended_md->st == st", file_str=0x80b86a0 "state.c"</div>
<div> #306 st->st_suspended_md->st == st passert()</div>
<div> #316 Patch for ALG support from Astaro</div>
<div> #324 Impossible to disable AGGRESSIVE mode</div>
<div> #327 pluto nat-t detection on 2.6 without klips nat-t patch fails to</div>
<div> disable nat-t</div>
<div> #328 ipsec setup fxies for awk compiled with --enable-switch</div>
<div> <font color="#FF0000">#341 Pluto crashes with: ipsec__plutorun: !pluto failure!: exited with error</font></div>
<div><font color="#FF0000"> status 134 (signal 6)</font></div>
<div> #342 fix for 2.6.12 undocumented API fixes for sk_zapped and sk_alloc()</div>
<div> (based on fix from Sergeil.</div>
<div> #350 fix for passert() at connections.c:1353: isanyaddr(&c->spd.that.host_addr)</div>
<div> #355 dpdaction restart fix from Astaro</div>
<div> #357 secure_xauth_username_str fix from Astaro</div>
<div> #360 checkv199install creates bogus "old" files</div>
<div> #361/#363 fix for passert() demux.c:1204: unknown address family in</div>
<div> anyaddr/unspecaddr</div>
<div> #368 Fix for ipsec --setup --status output and eroute counting</div>
<div> #372 Netkey and device labels (eth#:#)</div>
<div> #373 _updown_x509 still uses obsolete 'route add' commands</div>
<div> #377 pluto crashes processing first connection if nhelpers=0</div>
<div> #380 pluto crashes when sent an IKEPING</div>
<div> #381 assertion failure in init_demux if AGGRESSIVE not defined</div>
<div> #383 MODP >= 4096 FIX</div>
<div> #386 undefined symbols compiling klips as module</div>
<div> #387 / #420 pfkey_ops undefined error on SMP kernel compiles.</div>
<div> possibly fixed, but may result in SMP unsafe-ness.</div>
<div> #342 KLIPS cannot be compiled for 2.6.12+</div>
<div> #415 RPM packaging errors for 2.4 based kernels</div>
<div> #416 Need a way to tell if NAT-T is compiled in the IPSec kernel</div>
<div> </div>
<div> </div>
<div>-----Original Message-----<br>
From: Paul Wouters [<a href="mailto:paul@xelerance.com">mailto:paul@xelerance.com</a>]
<br>
Sent: Monday, October 03, 2011 1:11 PM<br>
To: Chen, Xuli (James)<br>
Cc: Users@openswan.org<br>
Subject: Re: [Openswan Users] ipsec__plutorun: !pluto failure!: exited with error status 134 (signal 6)</div>
<div> </div>
<div>On Mon, 3 Oct 2011, Chen, Xuli (James) wrote:</div>
<div> </div>
<div>> I'm experiencing below pluto failure with openswan-2.6.21-5.el5_5.3 when I was trying to stop ipsec during traffic.</div>
<div>> According to searching result from Google, it looks this kind of issue happened before with older openswan release.</div>
<div>> But I could not understand what's the root cause and solution for that. Anyone knows the root cause and solution?</div>
<div> </div>
<div>2.6.21 is very old. You should upgrade...</div>
<div> </div>
<div>> /usr/libexec/ipsec/pluto --nofork --secretsfile /etc/ipsec.secrets --ipsecdir /etc/ipsec.d --use-netkey</div>
<div>> --crlcheckinterval 600 --nhelpers 0</div>
<div>> Sep 28 09:18:09 tb1ems1 ipsec__plutorun: !pluto failure!: exited with error status 134 (signal 6)</div>
<div> </div>
<div>These logs are only the /var/log/messages entries. There is also a "secure" or "daemon" or "auth.log"</div>
<div>that captures logging from the pluto binary.</div>
<div> </div>
<div>If you have an ASSERTION FAILED in your /var/log/auth.log log, then we can probably tell you</div>
<div>when and where it was fixed (if it is not a new issue). If it just crashes without a message,</div>
<div>we would need to see a gdb trace before knowing more.</div>
<div> </div>
<div>but you can also go through <a href="ftp://ftp.openswan.org/openswan/CHANGES">
ftp://ftp.openswan.org/openswan/CHANGES</a> to get an idea about whether</div>
<div>or not we fixed it.</div>
<div> </div>
<div>Paul</div>
<div> </div>
</font>
</body>
</html>