From owner-freebsd-stable@freebsd.org  Wed May  8 01:29:58 2019
Return-Path: <owner-freebsd-stable@freebsd.org>
Delivered-To: freebsd-stable@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8F3CE1599805
 for <freebsd-stable@mailman.ysv.freebsd.org>;
 Wed,  8 May 2019 01:29:58 +0000 (UTC)
 (envelope-from eugen@grosbein.net)
Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org
 [IPv6:2001:1900:2254:206a::50:5])
 by mx1.freebsd.org (Postfix) with ESMTP id 1943F852B4
 for <freebsd-stable@freebsd.org>; Wed,  8 May 2019 01:29:58 +0000 (UTC)
 (envelope-from eugen@grosbein.net)
Received: by mailman.ysv.freebsd.org (Postfix)
 id CA9A11599804; Wed,  8 May 2019 01:29:57 +0000 (UTC)
Delivered-To: stable@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id B83051599803
 for <stable@mailman.ysv.freebsd.org>; Wed,  8 May 2019 01:29:57 +0000 (UTC)
 (envelope-from eugen@grosbein.net)
Received: from eg.sd.rdtc.ru (eg.sd.rdtc.ru [IPv6:2a03:3100:c:13::5])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "eg.sd.rdtc.ru", Issuer "eg.sd.rdtc.ru" (not verified))
 by mx1.freebsd.org (Postfix) with ESMTPS id 164F5852B3
 for <stable@freebsd.org>; Wed,  8 May 2019 01:29:56 +0000 (UTC)
 (envelope-from eugen@grosbein.net)
X-Envelope-From: eugen@grosbein.net
X-Envelope-To: stable@freebsd.org
Received: from [10.58.0.4] ([10.58.0.4])
 by eg.sd.rdtc.ru (8.15.2/8.15.2) with ESMTPS id x481TkZm090936
 (version=TLSv1.2 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT);
 Wed, 8 May 2019 08:29:46 +0700 (+07)
 (envelope-from eugen@grosbein.net)
Subject: Re: route based ipsec
To: KOT MATPOCKuH <matpockuh@gmail.com>, "Andrey V. Elsukov"
 <bu7cher@yandex.ru>
References: <CALmdT0Wdb+=LHvTaO9MU=MnQvQJEzKT9CXAf2kVPY=AAc=kxVQ@mail.gmail.com>
 <a7d8c37c-8712-ded6-4c30-d473bf20f877@yandex.ru>
 <CALmdT0W6f_X-V6UadxwYpsfbr0m34xANRGN5qWhs-7KMvCyA6A@mail.gmail.com>
Cc: stable@freebsd.org
From: Eugene Grosbein <eugen@grosbein.net>
Message-ID: <83f4e225-b767-72ee-43df-52163271ce8e@grosbein.net>
Date: Wed, 8 May 2019 08:29:38 +0700
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:45.0) Gecko/20100101
 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <CALmdT0W6f_X-V6UadxwYpsfbr0m34xANRGN5qWhs-7KMvCyA6A@mail.gmail.com>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
X-Rspamd-Queue-Id: 164F5852B3
X-Spamd-Bar: ------
Authentication-Results: mx1.freebsd.org
X-Spamd-Result: default: False [-6.98 / 15.00];
 NEURAL_HAM_MEDIUM(-1.00)[-1.000,0];
 NEURAL_HAM_LONG(-1.00)[-1.000,0]; REPLY(-4.00)[];
 NEURAL_HAM_SHORT(-0.98)[-0.983,0]
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-stable>, 
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable/>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 08 May 2019 01:29:58 -0000

08.05.2019 3:23, KOT MATPOCKuH wrote:

> I'm misunderstand what in my configuration can result core dumps a running
> daemon...
> I'm attached a sample racoon.conf. Can You check for possible problems?
> Also on one host I got a crash in another function:
> (gdb) bt
> #0  0x000000000024717f in privsep_init ()
> #1  0x00000000002375f4 in inscontacted ()
> #2  0x00000000002337d0 in isakmp_plist_set_all ()
> #3  0x000000000023210d in isakmp_ph2expire ()
> #4  0x000000000023162a in isakmp_ph1delete ()
> #5  0x000000000023110b in isakmp_ph2resend ()
> #6  0x00000008002aa000 in ?? ()
> #7  0x0000000000000000 in ?? ()

I guess configuration using certificates is not tested enough.
It works stable for me but I use psk only.

You need to fix code yourself or stop using racoon with certificates.