Package: vpnc
Version: 0.5.3r449-2.1
Followup-For: Bug #624203
Since the previous report did not contain any details, I'll use this for the
connection issue I just encountered and found a fix for. I'm not really sure
if this is the identical problem Pedro found, but perhaps.. :-)
'ip route get ...' now adds a few more extra morsels of data that
vpnc-script does not take into account. The credit for the sed fix goes to
Alessandro Suardi and was found at: https://lkml.org/lkml/2011/3/24/645
The error when using vpnc-script (I'm actually using openconnect) was:
<...>
Got CONNECT response: HTTP/1.1 200 OK
CSTP connected. DPD 30, Keepalive 20
Error: either "to" is duplicate, or "ipid" is a garbage.
Connected cscotun0 as 192.168.101.178, using SSL
Continuing in background; pid 1328
Established DTLS connection
The routes pushed from the concentrator are set up fine, but the static route
for the concentrator IP address was not set, due to the extra data not being
correct for 'ip route add ...'
After the attached sed line fix, I get a static route for the concentrator
again.
Kind regards,
Michael Shuler
-- System Information:
Debian Release: wheezy/sid
APT prefers testing
APT policy: (400, 'testing'), (300, 'unstable'), (100, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.39-1-686-pae (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages vpnc depends on:
ii libc6 2.13-4 Embedded GNU C Library: Shared lib
ii libgcrypt11 1.4.6-5 LGPL Crypto library - runtime libr
ii libgnutls26 2.10.5-1+b1 the GNU TLS library - runtime libr
Versions of packages vpnc recommends:
ii iproute 20110315-1 networking and traffic control too
Versions of packages vpnc suggests:
ii resolvconf 1.48 name server information handler
-- Configuration Files:
/etc/vpnc/example.conf [Errno 13] Permission denied: u'/etc/vpnc/example.conf'
/etc/vpnc/vpnc-script [Errno 13] Permission denied: u'/etc/vpnc/vpnc-script'
-- no debconf information
--- /etc/vpnc/vpnc-script.orig 2010-03-20 23:08:13.000000000 -0500
+++ /etc/vpnc/vpnc-script 2011-06-07 19:09:22.000000000 -0500
@@ -116,7 +116,7 @@
if [ -n "$IPROUTE" ]; then
fix_ip_get_output () {
- sed 's/cache//;s/metric \?[0-9]\+ [0-9]\+//g;s/hoplimit
[0-9]\+//g'
+ sed 's/cache//;s/metric \?[0-9]\+ [0-9]\+//g;s/hoplimit
[0-9]\+//g;s/ipid 0x....//g'
}
set_vpngateway_route() {
