[Openswan Users] sending notification PAYLOAD_MALFORMED

Leto letoams at gmail.com
Tue Sep 24 00:24:48 UTC 2013


shouldn't be needed. Dos your host get a new IP on reboot and you use the old ip in either ipsec.conf or ipsec.secrets?

sent from a tiny device 

On 2013-09-23, at 20:08, Paul Young <paul at arkig.com> wrote:

> The next things I did was change the PSK to something really simple - did not change the symptoms.
> 
> So now I have rebuilt the entire server on one side and am starting from scratch. Which is bulls__t
> 
> But I don't have much time to get this to work
> 
> 
> On 24 September 2013 07:10, Paul Young <paul at arkig.com> wrote:
>> Hi Leto,
>> 
>> Thanks for the reply. It looks ok and I basically generated the PSK with:
>> 
>> ipsec ranbits --continuous 128
>> 
>> Cheers,
>> Paul
>> 
>> 
>> On 24 September 2013 02:52, Leto <letoams at gmail.com> wrote:
>>> try avoiding some strange characters in the psk. ensure you're not mixing up ASCII vs hex?
>>> 
>>> sent from a tiny device 
>>> 
>>> On 2013-09-23, at 10:09, Paul Young <paul at arkig.com> wrote:
>>> 
>>>> Hi Guys,
>>>> 
>>>> What other reasons other than mismatched PSKs could cause this issue?
>>>> 
>>>> Thanks
>>>> 
>>>> 
>>>> On 23 September 2013 18:46, Paul Young <paul at arkig.com> wrote:
>>>>> I also just tried replacing the PSK on both sides and got the same issue continued
>>>>> 
>>>>> 
>>>>> On 23 September 2013 18:39, Paul Young <paul at arkig.com> wrote:
>>>>>> Hi all,
>>>>>> 
>>>>>> After rebooting one side of my Openswan setup without changing config and so on I am getting this error and cannot create a tunnel anymore.
>>>>>> 
>>>>>> The reason I rebooted the host is I applied a bunch of firmware updates to the hardware.
>>>>>> 
>>>>>> Sep 23 18:33:23 lobster pluto[38968]: "conn"[11] <outside IP address> #55: next payload type of ISAKMP Identification Payload has an unknown value: 23
>>>>>> Sep 23 18:33:23 lobster pluto[38968]: "conn"[11] <outside IP address> #55: probable authentication failure (mismatch of preshared secrets?): malformed payload in packet
>>>>>> Sep 23 18:33:23 lobster pluto[38968]: | payload malformed after IV
>>>>>> Sep 23 18:33:23 lobster pluto[38968]: |   74 40 8b d3  5a 30 3e 52  dc 54 26 a5  d9 88 bc e9
>>>>>> Sep 23 18:33:23 lobster pluto[38968]: |   e4 ea 8e 4b
>>>>>> Sep 23 18:33:23 lobster pluto[38968]: "conn"[11] <outside IP address> #55: sending notification PAYLOAD_MALFORMED to <outside IP address>:500
>>>>>> 
>>>>>> I have triple checked the PSK and it appears to be fine. What am I missing?
>>>>>> 
>>>>>> Thanks,
>>>>>> Paul
>>>> 
>>>> _______________________________________________
>>>> Users at lists.openswan.org
>>>> https://lists.openswan.org/mailman/listinfo/users
>>>> Micropayments: https://flattr.com/thing/38387/IPsec-for-Linux-made-easy
>>>> Building and Integrating Virtual Private Networks with Openswan:
>>>> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
> 
> _______________________________________________
> Users at lists.openswan.org
> https://lists.openswan.org/mailman/listinfo/users
> Micropayments: https://flattr.com/thing/38387/IPsec-for-Linux-made-easy
> Building and Integrating Virtual Private Networks with Openswan:
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openswan.org/pipermail/users/attachments/20130923/7a29ef14/attachment.html>


More information about the Users mailing list