Package: racoon
Version: 1:0.8.0-14
Severity: normal

Dear Maintainer,
*** Please consider answering these questions, where appropriate ***

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
     ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these lines ***

Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: kazs...@corundum.minerals.linuxfront.com
To: Debian Bug Tracking System <sub...@bugs.debian.org>
Subject: racoon generates a wrong policy for transport mode over NAT.
Bcc: kazs...@corundum.minerals.linuxfront.com

Package: racoon
Version: 1:0.8.0-14
Severity: minor

Dear Maintainer,

I tried to configure racoon with 'generate_polity on' for transport mode
over NAT, but racoon generated a policy with a peer address behind NAT and
transport mode did not work at all.  Tunnel mode was OK so I changed the
configuration to use tunnel mode just for 1-to-1 IPSec communication.

I do not know if IPSec transport mode should work with NAT-Traversal, but
the policy generation is still broken.  If it cannot generate a working
policy, it should fail in negotiation without generating a broken one.

-- System Information:
Debian Release: 7.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash

Versions of packages racoon depends on:
ii  adduser                3.113+nmu3
ii  debconf [debconf-2.0]  1.5.49
ii  ipsec-tools            1:0.8.0-14
ii  libc6                  2.13-38+deb7u6
ii  libcomerr2             1.42.5-1.1
ii  libgssapi-krb5-2       1.10.1+dfsg-5+deb7u2
ii  libk5crypto3           1.10.1+dfsg-5+deb7u2
ii  libkrb5-3              1.10.1+dfsg-5+deb7u2
ii  libldap-2.4-2          2.4.31-1+nmu2
ii  libpam0g               1.1.3-7.1
ii  libssl1.0.0            1.0.1e-2+deb7u13
ii  perl                   5.14.2-21+deb7u2

racoon recommends no packages.

racoon suggests no packages.

-- Configuration Files:
/etc/racoon/psk.txt [Errno 13] Permission denied: u'/etc/racoon/psk.txt'
/etc/racoon/racoon.conf changed [not included]

-- debconf information:
* racoon/config_mode: direct

-- System Information:
Debian Release: 7.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash

Versions of packages racoon depends on:
ii  adduser                3.113+nmu3
ii  debconf [debconf-2.0]  1.5.49
ii  ipsec-tools            1:0.8.0-14
ii  libc6                  2.13-38+deb7u6
ii  libcomerr2             1.42.5-1.1
ii  libgssapi-krb5-2       1.10.1+dfsg-5+deb7u2
ii  libk5crypto3           1.10.1+dfsg-5+deb7u2
ii  libkrb5-3              1.10.1+dfsg-5+deb7u2
ii  libldap-2.4-2          2.4.31-1+nmu2
ii  libpam0g               1.1.3-7.1
ii  libssl1.0.0            1.0.1e-2+deb7u13
ii  perl                   5.14.2-21+deb7u2

racoon recommends no packages.

racoon suggests no packages.

-- Configuration Files:
/etc/racoon/psk.txt [Errno 13] Permission denied: u'/etc/racoon/psk.txt'
/etc/racoon/racoon.conf changed [not included]

-- debconf information:
* racoon/config_mode: direct


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to