[Openswan Users] PAYLOAD_MALFORMED upon attempted tunnel
paul at xelerance.com
Thu Dec 16 16:04:22 CET 2004
On Wed, 15 Dec 2004, Johannes Graumann wrote:
> Sorry for being a pest, but I still didn't get this working and I really
> would like to ... is this too dumb a question or am I asking the wrong
> folks? If the second case applies: which NG might be more appropriate?
Please try this patch:
diff -r openswan-2/programs/pluto/demux.c openswan-2-patched/programs/pluto/demux.c
> /* MAYBE? */
diff -r openswan-2/programs/pluto/ipsec_doi.c openswan-2-patched/programs/pluto/ipsec_doi.c
< int numvidtosend = 0;
> int numvidtosend = 1; /* we will always send DPD VID */
One fixes a bug I introduced when switching to always send the DPD capability.
The other fixes a bug where we go back to a clean state after a NO_PROPOSAL
is sent and the other end keeps insisting to fix this state (Vigor).
these fixes are not in cvs yet because Michael needs to look into these issues
a bit more before making his final decision on how to properly fix it.
More information about the Users