Date: Thu, 10 Jun 2004 16:34:14 +0200 From: Sascha Holzleiter <sascha@daemonground.de> To: current@freebsd.org Subject: Re: IPSec broken in -current Message-ID: <1086878054.698.10.camel@dreamland.chief.home> In-Reply-To: <20040606025301.GB41345@mehnert.org> References: <20040606025301.GB41345@mehnert.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 2004-06-06 at 04:53, Hannes Mehnert wrote: > I have a FreeBSD-CURRENT from Fri Jun 4 17:24:01 CEST 2004 where IPSec > is broken: > > I tried IPSEC & IPSEC_ESP (kame stack) as well as FAST_IPSEC and always > get the following error during phase2 (output from racoon): > DEBUG: oakley.c:436:oakley_compute_keymat(): KEYMAT computed. > DEBUG: isakmp_quick.c:649:quick_i2send(): call pk_sendupdate > DEBUG: algorithm.c:513:alg_ipsec_encdef(): encription(rijndael) > DEBUG: algorithm.c:556:alg_ipsec_hmacdef(): hmac(hmac_sha1) > DEBUG: pfkey.c:1061:pk_sendupdate(): call pfkey_send_update > ERROR: pfkey.c:1076:pk_sendupdate(): libipsec failed send update > (No buffer space available) > ERROR: isakmp_quick.c:651:quick_i2send(): pfkey update failed. > ERROR: isakmp.c:750:quick_main(): failed to process packet. > > anyone has seen this? > I see the same problem with a yesterday -CURRENT build: 2004-06-10 16:20:04: ERROR: pfkey.c:1076:pk_sendupdate(): libipsec failed send update (No buffer space available) 2004-06-10 16:20:04: ERROR: isakmp_quick.c:651:quick_i2send(): pfkey update failed. 2004-06-10 16:20:04: ERROR: isakmp.c:750:quick_main(): failed to process packet. 2004-06-10 16:20:04: ERROR: isakmp.c:541:isakmp_main(): phase2 negotiation failed. -- Sascha
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1086878054.698.10.camel>