[Openswan Users] Vista Rekeying solution available yet?

James james at nttmcl.com
Wed Jun 11 11:58:49 EDT 2008

Hi Paul,

How would i configure ipsec.conf to do that?


Paul Wouters wrote:
>> In previous email (http://lists.openswan.org/pipermail/dev/2007-October/001683.html), Paul answered to somebody who had an identical issue :
>> "> Initialising the connection works fine but the Vista client gets
>>> disconnected after one hour. It seems as if something during
>>> the rekey attempt goes wrong.
>> Correct. I've notified Microsoft of this issue. You are not the fist to encounter this. It seems their rekeying code contains a bug where it
>> tries to negotiate a "new" connection for the current one."
> That seems to describe bug 888, not bug 867.
> A workaround for bug 888 is to ignore incoming delete SA requests, and just let
> openswan delete the old SA's.
> Paul
> _______________________________________________
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> Building and Integrating Virtual Private Networks with Openswan: 
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155

More information about the Users mailing list