[Openswan Users] Mac OS X Roadwarrior IPSEC/L2TP fails secondconnection

[Anthony Lester]

Hello Graeme,

Thanks for your suggestion but setting keylife (salifetime) to 1h has
no effect. In any case this was unset before so the default should have
been used. This is 8h for Openswan, although apparently the client
and peer have to agree and I am not sure regarding the MacOS X default.
Anthony

On 28 May 2010, at 03:47, Graeme Peart wrote:

> I had a similar problem.  The keylife was set to 30m which happened  
> to be
> the same as some expiration timeout in Windows Vista.  I set  
> keylife=1h
> which fixed my particular problem,
> Graeme
>
> -----Original Message-----
> From: users-bounces at openswan.org [mailto:users-bounces at openswan.org]  
> On
> Behalf Of Anthony Lester
> Sent: Thursday, May 27, 2010 5:28 PM
> To: Paul Wouters
> Cc: users at openswan.org
> Subject: Re: [Openswan Users] Mac OS X Roadwarrior IPSEC/L2TP fails
> secondconnection
>
> Hello Paul,
>
> Thank you very much for looking at this.
> I am connecting from MacOS 10.5.8 to Openswan 2.6.26
> and it still does not work correctly.
>
> I have attached my plutodebug=all trace (stripped of some
> certificate stuff for obvious reasons) which corresponds to
> the following actions:
>
> ipsec restarted at 23:43
> connection initiated at 23:46 - works
> disconnection at 23:51
> connection initiated at 23:55 - fails
>
> Let me know if you need more logs
>
> Best regards
> Anthony
>
> On 27 May 2010, at 20:34, Paul Wouters wrote:
>
>> On Thu, 27 May 2010, Anthony Lester wrote:
>>
>>> Anybody any ideas about my reconnection problem. For the moment I
>>> need to restart ipsec to connect a second time, which is not a very
>>> reliable solution for me. I'd be very grateful for any hints.
>>>
>>> I've just upgraded to Openswan 2.6.26 and I also upgraded my kernel
>>
>> It should be fixed if you upgrade the userland openswan to 2.6.26.
>> If not,
>> please show us a plutodebug=all trace. of this rekey failure.
>>
>> Paul
>

--
Anthony LESTER
Phone: +33 8 72 59 41 77
Mobile: +33 6 61 52 57 80
E-mail: alester at free.fr
14bis Villa de la Republique
92120 MONTROUGE
FRANCE