Bug 1957778 - a running libreswan should find a way to know when a default route has been added/changed
Summary: a running libreswan should find a way to know when a default route has been a...
Keywords:
Status: NEW
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: libreswan
Version: 8.3
Hardware: All
OS: Linux
medium
high
Target Milestone: beta
: ---
Assignee: Daiki Ueno
QA Contact: Ondrej Moriš
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-05-06 13:08 UTC by Mai Ling
Modified: 2023-08-09 05:28 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Type: Bug
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker CRYPTO-8674 0 None None None 2022-11-01 08:25:32 UTC
Red Hat Knowledge Base (Solution) 3610301 0 None None None 2021-05-06 13:08:34 UTC

Description Mai Ling 2021-05-06 13:08:34 UTC
Description of problem:
If at the service start time there is no default route, later on when a default route is added the service is unable to bring up a connection, showing the error message "We cannot identify ourselves with either end of this connection. XX.XX.XX.XX or 0.0.0.0 are not usable"

Version-Release number of selected component (if applicable):


How reproducible:

always

Steps to Reproduce:
1. configure network without a gateway
2. start libreswan
3. add default gateway
4. ipsec auto --up conn

Actual results:
https://access.redhat.com/solutions/3610301

Expected results:
find a way to know there is a default route and automatically bring up connections that are marked `auto` or `route` in the config file

Additional info:
workaround is to write a script to check for this condition and restart libreswan, and install it as a service to monitor libreswan service

strongswan does manage to get itself informed about such changes


Note You need to log in before you can comment on or make changes to this bug.