[Openswan Users] PAYLOAD_MALFORMED upon attempted tunnel restablishment

[Paul Wouters]

On Wed, 15 Dec 2004, Johannes Graumann wrote:

> Sorry for being a pest, but I still didn't get this working and I really
> would like to ... is this too dumb a question or am I asking the wrong
> folks? If the second case applies: which NG might be more appropriate?

Please try this patch:

diff -r openswan-2/programs/pluto/demux.c openswan-2-patched/programs/pluto/demux.c
2722a2723,2725
>
>           /* MAYBE? */
>           delete_state(st);
diff -r openswan-2/programs/pluto/ipsec_doi.c openswan-2-patched/programs/pluto/ipsec_doi.c
3332c3332,3336
<     int numvidtosend = 0;
---
>     int numvidtosend = 1;  /* we will always send DPD VID */
>

One fixes a bug I introduced when switching to always send the DPD capability.
The other fixes a bug where we go back to a clean state after a NO_PROPOSAL
is sent and the other end keeps insisting to fix this state (Vigor).

these fixes are not in cvs yet because Michael needs to look into these issues
a bit more before making his final decision on how to properly fix it.

Paul