[Openswan Users] Is "bug#412" already fixed ?

Tetsuya Okumichi okumichi.tetsuya at jp.panasonic.com
Thu Oct 27 16:38:05 CEST 2005


Hi all,

http://bugs.xelerance.com/view.php?id=412

Is "bug#412" already fixed?


===================
I'm using Openswan 2.3.1 and 2.4.0 on Linux2.4.20, 
Multiple tunnels between two vpn gateways are configured.
3 conn-section(test1, test2, test3) setting in "/etc/ipsec.conf".

When "ipsec setup --start",
test1 and test2 succeeded(IPsec SA is establised),
but test3 failed(IPsec SA isn't establised).

message with test3 in "/var/log/secure" below.
"test3" #16: can not start crypto helper: failed to find any available worker

Thid problem is evaded with "plutowait=yes".

But When reaky timing is same time test1=tes2=test3, Main Mode failed at test3.

	keylife=2560s, rekeymargin=640s, rekeyfuzz=0%

message with test3 in /var/log/secure too.
"test3" #XX: can not start crypto helper: failed to find any available worker

I want to solve this bug "412". 
Thanks for help.

============================================================
/etc/ipsec.conf
version 2.0

config setup
	interfaces="ipsec0=eth0"

conn %default
	authby=secret
	ikelifetime=28800s

conn test1
	leftsubnet=200.200.0.1/32
	rightsubnet=200.200.10.1/32
	leftprotoport=132
	rightprotoport=132
	type=tunnel
	left=192.168.0.1
	right=192.168.0.101
	esp=3des-md5-96
	keylife=2560s
	rekeymargin=640s
	rekeyfuzz=0%
	auto=start

conn test2
	leftsubnet=200.200.0.1/32
	rightsubnet=200.200.10.2/32
	type=tunnel
	left=192.168.0.1
	right=192.168.0.101
	esp=3des-md5-96
	keylife=2560s
	rekeymargin=640s
	rekeyfuzz=0%
	auto=start

conn test3
	leftsubnet=200.200.0.1/32
	rightsubnet=200.200.10.0/24
	leftprotoport=1
	rightprotoport=1
	type=tunnel
	left=192.168.0.1
	right=192.168.0.101
	esp=3des-md5-96
	keylife=2560s
	rekeymargin=640s
	rekeyfuzz=0%
	auto=start
============================================================

Best regards,
Tetusya





More information about the Users mailing list