[Openswan Users] 2.3.0 has known issues

[Ken Bantoft]

Known issues:

1) There *seems* to be a rekey bug, where rekeying doesn't work.  
However, we can't duplicate this consistantly, or even twice in a row
2) Rene (Debian Maintainer) reports some core dumps, but no 
backtrace/logs/config etc... and we haven't been able to get any more 
information.
3) There is a security hole if you enable both XAUTH + PAM (which is not 
on unless you manually edit Makefile.inc and recompile) in pluto.  That 
one is fixed in CVS (PRE2_3 branch, and HEAD)

So no, your problem is not known...


Gary W. Smith wrote:

> Paul,
>  
> known issues seems to be a real vague listing...  :) 
>  
> I'm trying to toubleshoot a problem with one end of the tunnel 
> freezing when large packets are being transmitted.  Unfortunately the 
> remote terminal is in a telco closet with no monitor so I can't have 
> my guy see if the entire machine is hung or if the network is the only 
> think being affected. 
>  
> It happens happens on "ping -l 30000".  Tunnel keeps dying under 
> load.  You can ping until your hearts content with normal ping and 
> about 2 seconds after running the 30k the other end of the tunnel 
> hangs.  We had been fighting a problem earlier where two servers had 
> lost communication from each other. 
>  
> Is this one of those issues?
>  
> Gary Smith
>
> ------------------------------------------------------------------------
> *From:* users-bounces at openswan.org on behalf of Paul Wouters
> *Sent:* Tue 1/18/2005 7:03 AM
> *To:* users at openswan.org
> *Subject:* [Openswan Users] 2.3.0 has known issues
>
>
> Hi guys,
>
> This is just to let you know that we have found various serious problems
> with 2.3.0 that cause many problems for tunnels and rekeying.
>
> Please use 2.2.x until we release 2.3.1.
>
> Sorry for the troubles,
>
> Paul
> _______________________________________________
> Users mailing list
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
>
>------------------------------------------------------------------------
>
>_______________________________________________
>Users mailing list
>Users at openswan.org
>http://lists.openswan.org/mailman/listinfo/users
>  
>