[Openswan Users] Is "bug#412" already fixed ?

[Paul Wouters]

On Thu, 27 Oct 2005, Tetsuya Okumichi wrote:

> http://bugs.xelerance.com/view.php?id=412
>
> Is "bug#412" already fixed?

I don't think so. Try setting nhelpers=0 as workaround?

Paul

> ===================
> I'm using Openswan 2.3.1 and 2.4.0 on Linux2.4.20,
> Multiple tunnels between two vpn gateways are configured.
> 3 conn-section(test1, test2, test3) setting in "/etc/ipsec.conf".
>
> When "ipsec setup --start",
> test1 and test2 succeeded(IPsec SA is establised),
> but test3 failed(IPsec SA isn't establised).
>
> message with test3 in "/var/log/secure" below.
> "test3" #16: can not start crypto helper: failed to find any available worker
>
> Thid problem is evaded with "plutowait=yes".
>
> But When reaky timing is same time test1=tes2=test3, Main Mode failed at test3.
>
> 	keylife=2560s, rekeymargin=640s, rekeyfuzz=0%
>
> message with test3 in /var/log/secure too.
> "test3" #XX: can not start crypto helper: failed to find any available worker
>
> I want to solve this bug "412".
> Thanks for help.
>
> ============================================================
> /etc/ipsec.conf
> version 2.0
>
> config setup
> 	interfaces="ipsec0=eth0"
>
> conn %default
> 	authby=secret
> 	ikelifetime=28800s
>
> conn test1
> 	leftsubnet=200.200.0.1/32
> 	rightsubnet=200.200.10.1/32
> 	leftprotoport=132
> 	rightprotoport=132
> 	type=tunnel
> 	left=192.168.0.1
> 	right=192.168.0.101
> 	esp=3des-md5-96
> 	keylife=2560s
> 	rekeymargin=640s
> 	rekeyfuzz=0%
> 	auto=start
>
> conn test2
> 	leftsubnet=200.200.0.1/32
> 	rightsubnet=200.200.10.2/32
> 	type=tunnel
> 	left=192.168.0.1
> 	right=192.168.0.101
> 	esp=3des-md5-96
> 	keylife=2560s
> 	rekeymargin=640s
> 	rekeyfuzz=0%
> 	auto=start
>
> conn test3
> 	leftsubnet=200.200.0.1/32
> 	rightsubnet=200.200.10.0/24
> 	leftprotoport=1
> 	rightprotoport=1
> 	type=tunnel
> 	left=192.168.0.1
> 	right=192.168.0.101
> 	esp=3des-md5-96
> 	keylife=2560s
> 	rekeymargin=640s
> 	rekeyfuzz=0%
> 	auto=start
> ============================================================
>
> Best regards,
> Tetusya
>
>
>
> _______________________________________________
> Users mailing list
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
>

-- 

"Happiness is never grand"

	--- Mustapha Mond, World Controller (Brave New World)