[Openswan Users] ANNOUNCE: New Release Candidates: 1.0.4rc1 and 2.1.2rc4

Lewis Shobbrook lshobbrook at fasttrack.net.au
Tue May 11 13:37:46 CEST 2004


Hi Ken,

Thanks a lot for the reply. 

> 
> Hi Lewis, 
> 
> Set plutodebug=control and send me the logs please...
> 
> And ensure you have leftsendcert=always in your config.
> 

leftsendcert=always, enables the SA to be established. 
I was focusing on the observation that without "leftsendcert=always"
ISAKMP fails at an earlier stage than it used to for NAT-T x509 in rc3,
for both rc4 & 5 and mistakenly thought this was part of the bug in
question.  

Sorry, I jumped the starting gun on that one.

However, I can confirm the same "Network is unreachable" issue that has
just been posted on a couple of machines. One where rc5 is "nat'd" &
client isn't, and also another where rc5 isn't and client is.  Yet to
test no NAT on either, will do so soon.

Cheers,

Lewis


More information about the Users mailing list