[Openswan Users] "cannot install eroute" after remote IP change

[Michael Smith]

Michael Smith wrote:
>>> Feb 27 15:14:51 vpngw pluto[26638]: "bldg-othersite-phones"[6] 1.2.3.4
>>> #649: cannot install route -- it is in use for "bldg-othersite-phones"[5]
>>> 1.2.3.4 #473

> I dug through the git history of could_route() in pluto/kernel.c. In 
> Openswan 2.4.x, the block around the check that leads to "cannot install 
> route" used to be surrounded by #ifdef KLIPS. The #ifdef was removed as 
> part of a merge of the CVS tree into Git:

I hacked up kernel.c to prevent the memory leak, but the underlying 
issue is still there. I've opened a bug 
(https://gsoc.xelerance.com/issues/1224).

Mike


--- openswan-2.6.33/programs/pluto/kernel.c.orig        2011-02-21 
15:11:19.000000000 -0500
+++ openswan-2.6.33/programs/pluto/kernel.c     2011-03-02 
21:33:50.000000000 -0500
@@ -697,6 +697,13 @@
                      loglog(RC_LOG_SERIOUS
                          , "cannot install eroute -- it is in use for 
\"%s\"%s #%lu"
                          , ero->name, inst, esr->eroute_owner);
+#if defined(NETKEY_SUPPORT)
+                    if (kern_interface == USE_NETKEY) {
+                        loglog(RC_LOG_SERIOUS
+                            , "doing it anyway because this is NETKEY");
+                        return route_easy;
+                    }
+#endif /* NETKEY_SUPPORT */
                      return FALSE;       /* another connection already 
using the eroute,
                                             TODO: NETKEY apparently can 
do this though */
              }