Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

IPSEC AH Proposals missing in swanctl.conf #7344

Closed
ksfj360 opened this issue Mar 25, 2024 · 0 comments
Closed

IPSEC AH Proposals missing in swanctl.conf #7344

ksfj360 opened this issue Mar 25, 2024 · 0 comments
Assignees
Labels
bug Production bug
Milestone

Comments

@ksfj360
Copy link

ksfj360 commented Mar 25, 2024

Important notices

In configuration valuo of AP_PROPOSALS is missing.

To Reproduce

Create IPSEC tunnel (lagacy) with phase 2 just a AH / SHA256.
In confign file ah_proposal is empty.

REASON:

in file
\core-master\src\etc\inc\plugins.inc.d\ipsec.inc

line
1594
there is
if (!empty($parsed_phase2['esp_proposals'])) {
$this_conn['children'][$this_connid]['esp_proposals'] = join(',', $parsed_phase2['esp_proposals']);
}
if (!empty($parsed_phase2['ah_proposals'])) {
$this_conn['children'][$this_connid]['ah_proposals'] = join(',', $parsed_phase2['esp_proposals']);
}

should be
$this_conn['children'][$this_connid]['ah_proposals'] = join(',', $parsed_phase2['ah_proposals']);

@AdSchellevis AdSchellevis self-assigned this Mar 25, 2024
@AdSchellevis AdSchellevis added the bug Production bug label Mar 25, 2024
@AdSchellevis AdSchellevis added this to the 24.7 milestone Mar 25, 2024
fichtner pushed a commit that referenced this issue Mar 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Production bug
Development

No branches or pull requests

2 participants