Bug 703473 - Protocol ports does not work if hostname is given instead of ipaddress with Openswan
Summary: Protocol ports does not work if hostname is given instead of ipaddress with O...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: openswan
Version: 6.1
Hardware: Unspecified
OS: Unspecified
urgent
high
Target Milestone: rc
: ---
Assignee: Avesh Agarwal
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks: 712112
TreeView+ depends on / blocked
 
Reported: 2011-05-10 13:16 UTC by Avesh Agarwal
Modified: 2011-12-06 19:05 UTC (History)
5 users (show)

Fixed In Version: openswan-2.6.32-5.el6
Doc Type: Bug Fix
Doc Text:
Openswan did not handle protocol and port (leftprotoport) configuration correctly if the hostname parameter was configured instead of the ipaddress parameter using Openswan. This update solves this issue, and Openswan now correctly sets up policies with the correct protocol and port even when the hostname parameter is configured.
Clone Of:
Environment:
Last Closed: 2011-12-06 19:05:21 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2011:1761 0 normal SHIPPED_LIVE openswan bug fix and enhancement update 2011-12-06 01:01:39 UTC

Description Avesh Agarwal 2011-05-10 13:16:13 UTC 
Description of problem:
Porotocol ports does not work if hostname is given instead of ipaddress with Openswan. When ports are configured using leftprotoport in a connection configuration.


Version-Release number of selected component (if applicable):
2.6.32-4.el6

How reproducible:
Always

Steps to Reproduce:
1. configure 
left=abc.xyz.com #(instead of ip address)
leftprotoport=tcp/21
2. established connection
3. check output of "ip xfrm policy" and ports are not shown, and they dont work. 
  
Actual results:
protocol ports does not work with hostname too.

Expected results:
protocol ports should work with hostname too.

Additional info:
Comment 4 Martin Prpič 2011-07-13 19:42:00 UTC 
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Openswan did not handle protocol and port (leftprotoport) configuration correctly if the hostname parameter was configured instead of the ipaddress parameter using Openswan. This update solves this issue, and Openswan now correctly sets up policies with the correct protocol and port even when the hostname parameter is configured.
Comment 8 errata-xmlrpc 2011-12-06 19:05:21 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2011-1761.html
Note You need to log in before you can comment on or make changes to this bug.