The Wayback Machine - http://web.archive.org/web/20250310215321/https://github.com/libreswan/libreswan/issues
Skip to content

Issues: libreswan/libreswan

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

550 Open 1,259 Closed
550 Open 1,259 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

overhaul BC, KU, and EKU, of basic root and intermediate certs test framework problems with the test framework (KVM, NS, WWW, ...) X.509
#2082 opened Mar 8, 2025 by cagney v5.3
Completely remove _stackmanager
#2080 opened Mar 6, 2025 by bleve
config option to allow non-ipsecIKE x.509 profile ipsec.conf including addconn and connection.c's add_connection() RFC RFC compliance X.509
#2075 opened Mar 6, 2025 by cagney v5.3
5
document OpenSSL vs the world folly with RDN order
#2073 opened Mar 5, 2025 by cagney
make BSD rc scripts consistent with linux
#2072 opened Mar 5, 2025 by cagney
1
reduce ipsec pluto --option to a bare minimum, encourage ipsec pluto --conf file ipsec.conf including addconn and connection.c's add_connection()
#2071 opened Mar 5, 2025 by cagney
load conns when the cert has an invalid time ipsec.conf including addconn and connection.c's add_connection() X.509
#2066 opened Mar 2, 2025 by cagney
1 task done
3
are the bespoke certificates needed? test framework problems with the test framework (KVM, NS, WWW, ...) X.509
#2059 opened Feb 28, 2025 by cagney v5.3
10
ipsec start behaves differently inside a custom namespace trying to test libreswan build Building and Installing Libreswan test framework problems with the test framework (KVM, NS, WWW, ...) whack ipsec [whack] ... commands
#2054 opened Feb 27, 2025 by cagney
4 of 6 tasks
12
roadwarrior xauth cannot respond to IPsec SA request because no connection is known
#2051 opened Feb 27, 2025 by wmasilva
6 tasks
2
ipsec-interface doesn't handle IPv4+IPv6 addresspool assignments, see add_kernel_ipsec_interface_address_1() IPsec Interface aka ipsec-interface; Linux VTI, XFRMI; BSD ipsecif, ipsec_if, sec
#2047 opened Feb 25, 2025 by paulwouters
3 of 6 tasks
1
ipsec status Total line should show number in routed-ondemand too
#2043 opened Feb 24, 2025 by paulwouters
updown confused by unmanaged ipsec-interface has workaround Includes a workaround to problem IPsec Interface aka ipsec-interface; Linux VTI, XFRMI; BSD ipsecif, ipsec_if, sec updown
#2040 opened Feb 23, 2025 by cagney
warn that interface-ip is ignored when unmanaged IPsec Interface aka ipsec-interface; Linux VTI, XFRMI; BSD ipsecif, ipsec_if, sec
#2037 opened Feb 21, 2025 by cagney
XPECTATION FAILED: "rw-eap"[1] 192.1.3.209 #1: not (md->chain[ISAKMP_NEXT_v2AUTH] == ((void *)0)) EAPTLS IKEv2 reproduced a test reproducing the problem has been added to the testsuite
#2036 opened Feb 20, 2025 by cagney
OCSP startup log deficient logging X.509
#2034 opened Feb 18, 2025 by cagney
merge fetch.c into _import_crl X.509
#2033 opened Feb 17, 2025 by cagney
1
no point fetching a CRL twice X.509
#2032 opened Feb 17, 2025 by cagney
SEGV using NULL authentication with multiple peers ESP Encapsulating Security Payload IKEv2 v5.0
#2029 opened Feb 7, 2025 by paulwouters
2 of 6 tasks
7
FATAL: ASSERTION FAILED: "road-east-vti"[1] 192.1.3.209: routing: unhandled ESTABLISH_INBOUND, UNROUTED_INBOUND, INSTANCE IKEv1 IKEv2 routing
#2028 opened Feb 6, 2025 by cagney
1
ikev2-x509-pluto-05-forged is using an expired forgery IKEv2 test framework problems with the test framework (KVM, NS, WWW, ...) X.509
#2025 opened Jan 30, 2025 by cagney
2
ipsec add alias only adds first
#2020 opened Jan 28, 2025 by cagney
1
ikev2 silently ignores ikev1's xauth parameters IKEv2 ipsec.conf including addconn and connection.c's add_connection() logging
#2018 opened Jan 27, 2025 by cagney
wip addresspool-6in6-defaultroute-dual-dns-ikev2 nee ipv6-addresspool-05-dual-stack is showing correct DNS lookup IPv6 Stuff that happens with IPv6 (but presumably not IPv4) test framework problems with the test framework (KVM, NS, WWW, ...)
#2016 opened Jan 27, 2025 by cagney
review addresspool-6in6-6in6-6in6-ikev2 aka ipv6-addresspool-02-3-clients-ikev2 addresspool IPv6 Stuff that happens with IPv6 (but presumably not IPv4) test framework problems with the test framework (KVM, NS, WWW, ...)
#2015 opened Jan 27, 2025 by cagney
ProTip! Follow long discussions with comments:>50.