Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

IPSec tunnel: no connection after update to CentOS 7.5 #5501

Closed
gsanchietti opened this issue May 19, 2018 · 6 comments
Closed

IPSec tunnel: no connection after update to CentOS 7.5 #5501

gsanchietti opened this issue May 19, 2018 · 6 comments
Labels
bug A defect of the software verified All test cases were verified successfully
Projects
NethServer 7
Milestone
NSW18.20

Comments

@gsanchietti
Copy link
Member

gsanchietti commented May 19, 2018 •
edited

IPSec tunnels can't connect to remote host after restart of ipsec service.

Steps to reproduce

  • Make sure to have installed nethserver-ipsec-tunnels from NS 7.4 along with libreswan 3.20
  • Configure a tunnel and check the connection is working
  • Update to libreswan 3.23

Expected behaviour

Tunnels are up & running after the update.

Actual behaviour

Tunnels are inactive and journalct -u ipsec reports following error:

May 18 11:06:25 auenland pluto[1164]: "xyz_ipsec-tunnel/1x6": We cannot identify ourselves with either end of this connection.  6.7.8.9 or 0.0.0.0 are not usable

Workaround

db vpn setprop xyz_ipsec Custom_left <red_ip>
signal-event nethserver-ipsec-tunnels-save

Components

nethserver-ipsec-tunnels-1.1.1-1.ns7.noarch
libreswan-3.20

See also

https://community.nethserver.org/t/update-to-7-5-problem-s/9810/46

Thanks to DrDth
@gsanchietti gsanchietti added the bug A defect of the software label May 19, 2018
@gsanchietti gsanchietti added this to ✋ Needs review in NethServer 7 via automation May 19, 2018
@gsanchietti gsanchietti mentioned this issue May 19, 2018
Merged
gsanchietti added a commit to NethServer/nethserver-ipsec-tunnels that referenced this issue May 21, 2018
@gsanchietti
Merge pull request #4 from gsanchietti/issue5490
a7b5500 
tunnels: use ip address as 'left' value

NethServer/dev#5501
@nethbot
Copy link
Member

nethbot commented May 21, 2018

in 7.5.1804/testing:

@gsanchietti
Copy link
Member Author

Test case

Check the bug is not reproducible.

@gsanchietti gsanchietti added the testing Packages are available from testing repositories label May 21, 2018
@nethbot
Copy link
Member

nethbot commented May 21, 2018

in 7.5.1804/testing:

@nethbot
Copy link
Member

nethbot commented May 21, 2018

in 7.5.1804/testing:

@gsanchietti
Copy link
Member Author

Verified.

@gsanchietti gsanchietti added verified All test cases were verified successfully and removed testing Packages are available from testing repositories labels May 21, 2018
@nethbot
Copy link
Member

nethbot commented May 21, 2018

in 7.5.1804/updates:

NethServer 7 automation moved this from ✋ Needs review to 🗑 Done May 21, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug A defect of the software verified All test cases were verified successfully
Projects
No open projects
NethServer 7
🗑 Done
Milestone
NSW18.20
Development

No branches or pull requests
3 participants
@gsanchietti @DavidePrincipi @nethbot