Hide Forgot
Description of problem: When --exchange parameter [*] is used with ipsec ikeping, it seems not to be recognized correctly. Moreover with unrecognized parameter ipsec ikeping aborts. [*] [--exchangenum num] use num instead of 244 for the exchange type. Version-Release number of selected component (if applicable): openswan-2.6.32-25.el6 How reproducible: 100% Steps to Reproduce: 0. make sure ipsec is stopped 1. ipsec ikeping --thisoptiondoesnotexist 1.2.3.4 2. ipsec ikeping --exchangenum 245 1.2.3.4 Actual results: 1. /usr/libexec/ipsec/ikeping: unrecognized option '--thisoptiondoesnotexist' ikeping: /builddir/build/BUILD/openswan-2.6.32/programs/ikeping/ikeping.c:396: main: Assertion `0' failed. Aborted (core dumped) 2. ikeping: /builddir/build/BUILD/openswan-2.6.32/programs/ikeping/ikeping.c:396: main: Assertion `0' failed. Aborted (core dumped) Expected results: 1. ipsec ikeping: unknown option '--thisoptiondoesnotexist' 2. ipsec ikeping: unknown option `--exchangenum' Additional info: This is not a regression.
This was fixed in libreswan upstream last week: https://github.com/libreswan/libreswan/commit/c5b9334167795c7a683c4a6630770fa323ee2750 I can put it in if/when we do a 6.6 release. libreswan in rhel7 will have the fix
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2014-1588.html