Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 14 Dec 2019 06:08:14 +0000
From:      bugzilla-noreply@freebsd.org
To:        net@FreeBSD.org
Subject:   [Bug 242606] Low capacity of Variable "IPSEC_MANUAL_REQID_MAX" crashes StrongSwan IPSec/IKEV2 VPN Server
Message-ID:  <bug-242606-7501-0wqQQvardT@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-242606-7501@https.bugs.freebsd.org/bugzilla/>
References:  <bug-242606-7501@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=242606

--- Comment #6 from Conrad Meyer <cem@freebsd.org> ---
In fact, FreeBSD does something similar, but produces a warning first (ipseclog
LOG_DEBUG, "reqid=%d range violation, updated by kernel").  That code is
present since 2002.  I can't tell if libcharon is broken on Linux and merely
doesn't observe it there, or if it's just poorly designed.  I don't know if
pfsense has any modifications to FreeBSD in this area that might be relevant. 
Can you reproduce the problem on FreeBSD, or just pfsense?

-- 
You are receiving this mail because:
You are the assignee for the bug.


Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-242606-7501-0wqQQvardT>