[Openswan dev] bug report (auto=add &auto=start)

Alex linux at vfemail.net
Mon Jun 18 08:43:59 EDT 2007


Hello dev experts,

Few days ago i posted here a message being in doubt who is responsabile for a 
strange message in my syslog.
See my old posts here:
http://lists.openswan.org/pipermail/dev/2007-June/001593.html
or here
http://lists.openswan.org/pipermail/users/2007-June/012591.html

Jun 15 14:04:22 dev13 ipsec_setup: ...Openswan IPsec started
Jun 15 14:04:22 dev13 ipsec_setup: Starting Openswan IPsec 2.4.8...
Jun 15 14:04:23 dev13 ipsec__plutorun: 104 "z1" #1: STATE_MAIN_I1: initiate
Jun 15 14:04:23 dev13 ipsec__plutorun: ...could not start conn "z1" 
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Now i come back with some explanations and open a bug report:

Below, comes my ipsec.conf file (the same on booth routers):
$ cat /etc/ipsec.conf
version 2.0
conn z1
    authby=secret
    left=1.2.3.4
    leftsubnet=192.168.13.0/24
    leftnexthop=1.2.3.111
    right=5.6.7.8
    rightsubnet=10.0.100.0/24
    rightnexthop=5.6.7.222
    keyexchange=ike
    ike=3des-md5-modp1024
    auth=esp
    esp=3des-md5-96
    pfs=no
    auto=start
include /etc/ipsec.d/examples/no_oe.conf

If, on one router i change from auto=start to auto=add, the message disappear 
and i have a clean syslog on this router (but the same stupid message appear 
on the second router, where i keeped auto=start):

Jun 15 15:02:23 dev13 kernel: NET: Registered protocol family 15
Jun 15 15:02:23 dev13 ipsec_setup: NETKEY on eth0 1.2.3.4/255.255.255.0 
broadcast 1.2.3.255
Jun 15 15:02:24 dev13 ipsec_setup: ...Openswan IPsec started
Jun 15 15:02:24 dev13 ipsec_setup: Starting Openswan IPsec 2.4.8...

The main problem is that i can't use auto=add on booth routers.... How can be 
turned off this stupid message!

Regards,
Alex

PS: and yes, /var/log/secure does not show up some errors!


More information about the Dev mailing list