I have tried certificates in the past, but racoon never worked stable enough. Didn’t crash on me though.
I have moved over to Strongswan and never regretted this move. Very stable. Peter > On 8 May 2019, at 03:29, Eugene Grosbein <eu...@grosbein.net> wrote: > > 08.05.2019 3:23, KOT MATPOCKuH wrote: > >> I'm misunderstand what in my configuration can result core dumps a running >> daemon... >> I'm attached a sample racoon.conf. Can You check for possible problems? >> Also on one host I got a crash in another function: >> (gdb) bt >> #0 0x000000000024717f in privsep_init () >> #1 0x00000000002375f4 in inscontacted () >> #2 0x00000000002337d0 in isakmp_plist_set_all () >> #3 0x000000000023210d in isakmp_ph2expire () >> #4 0x000000000023162a in isakmp_ph1delete () >> #5 0x000000000023110b in isakmp_ph2resend () >> #6 0x00000008002aa000 in ?? () >> #7 0x0000000000000000 in ?? () > > I guess configuration using certificates is not tested enough. > It works stable for me but I use psk only. > > You need to fix code yourself or stop using racoon with certificates. > > _______________________________________________ > freebsd-stable@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"
smime.p7s
Description: S/MIME cryptographic signature
