From mboxrd@z Thu Jan  1 00:00:00 1970
From: Stefan Schantl <stefan.schantl@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [Development] Strongswan 5.0.0
Date: Mon, 06 Aug 2012 21:48:57 +0200
Message-ID: <50201FA9.5070609@ipfire.org>
In-Reply-To: <1344267360.7540.23.camel@rice-oxley.tremer.info>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0756603012189131891=="
List-Id: <development.lists.ipfire.org>

--===============0756603012189131891==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

Hello Michael,

I've tested to stop IPSec from shell which worked without problems. But 
if I try to disable and stop it from the WUI, by
unsing the checkbox the service does a restart and no shutdown.

I've looked inside the error_log from the httpd, and found the following 
lines:

[Mon Aug 06 21:42:08 2012] [error] [client 192.168.xxx.xxx] IPSec 
enabled on orange but orange interface is invalid or not found, referer: 
https://gate.xxx:444/cgi-bin/vpnmain.cgi
[Mon Aug 06 21:42:08 2012] [error] [client 192.168.xxx.xxx] IPSec 
enabled on blue but blue interface is invalid or not found, referer: 
https://gate.xxx:444/cgi-bin/vpnmain.cgi
[Mon Aug 06 21:42:08 2012] [error] [client 192.168.xxx.xxx] Stopping 
strongSwan IPsec..., referer: https://gate.xxx:444/cgi-bin/vpnmain.cgi
[Mon Aug 06 21:42:12 2012] [error] [client 192.168.xxx.xxx] Starting 
strongSwan 5.0.0 IPsec [starter]..., referer: 
https://gate.xxx:444/cgi-bin/vpnmain.cgi
[Mon Aug 06 21:42:12 2012] [error] [client 192.168.xxx.xxx] , referer: 
https://gate.xxx:444/cgi-bin/vpnmain.cgi

Why are there entries about an orange and blue network, I don't have one 
of them......

Do you have any idea about that ?

Stefan

> On Mon, 2012-08-06 at 17:21 +0200, Stefan Schantl wrote:
>> The only bad point, I've to report is, that after the update I can't
>> disable IPSec over the WUI anymore - may other testers will report the
>> same issue.
> What is the exact problem? Did you get an internal server error from the
> CGI script? Need a more precise error report.
>
> Michael
>
>


--===============0756603012189131891==--