[Openswan Users] Routing problem and pluto crash

[Paul Wouters]

On Mon, 6 Apr 2009, Gwyn Connor wrote:

> Subject: [Openswan Users] Routing problem and pluto crash

> HOST1 (Openswan 2.6.16 with NETKEY, Kernel 2.6.27.7):

Upgrade to 2.6.21.

> HOST2 (Openswan 2.4.7 with NETKEY, Kernel 2.6.27.19):

Upgrade to 2.4.14.

> Could all this be related to right=%any in my configuration on HOST1?

That's fine as long as HOST2 initiates the connection and you have rekey=no
on HOST1.

> I also tried setting the actual IP address there, but this made pluto
> crash due to an ASSERTION failure:
>
> Apr  5 23:18:08 backup pluto[31127]: "testvpn" #2: responding to Quick
> Mode proposal {msgid:a949675c}
> Apr  5 23:18:08 backup pluto[31127]: "testvpn" #2:     us:
> 10.0.1.0/24===141.3.151.44[C=DE, ST=BW, O=test AG, CN=test VPN,
> E=vpn at example.org]
> Apr  5 23:18:08 backup pluto[31127]: "testvpn" #2:   them:
> 129.13.72.2<129.13.72.2>[C=DE, ST=BW, O=test, CN=Server test,
> E=vpn at example.org]===10.0.2.0/24
> Apr  5 23:18:09 backup pluto[31127]: "testvpn" #2: ASSERTION FAILED at
> /usr/src/packages/BUILD/openswan-2.6.16/programs/pluto/kernel.c:2157:
> c->kind == CK_PERMANENT || c->kind == CK_INSTANCE

> Any ideas how I can fix it to make the VPN work?

Upgrade. Then let us know if you still have problems.

Paul