Trouble with juniper connection - invalid HMAC
Gaute Amundsen
gaute at div.org
Thu Dec 15 01:00:45 PST 2016
It seems 7.08 still has the same issue in my case.
Any suggestions?
G.
./configure --with-vpnc-script=/usr/share/vpnc-scripts/vpnc-script
BUILD OPTIONS:
SSL library: OpenSSL
PKCS#11 support: no
DTLS support: yes
ESP support: yes
libproxy support: no
RSA SecurID support: no
PSKC OATH file support: no
GSSAPI support: no
Yubikey support: no
LZ4 compression: no
Java bindings: no
Build docs: no
Unit tests: no
make check
...
PASS: lzstest
PASS: seqtest
FAIL: bad_dtls_test
============================================================================
Testsuite summary for openconnect 7.08
============================================================================
# TOTAL: 3
# PASS: 2
# SKIP: 0
# XFAIL: 0
# FAIL: 1
# XPASS: 0
# ERROR: 0
With -vv
ping -c1 -W 2 -s 1394 host.tld - succeeds
Sent ESP packet of 116 bytes
No work to do; sleeping for 10000 ms...
Received ESP packet of 132 bytes
No work to do; sleeping for 15000 ms...
Sent ESP packet of 1444 bytes
Sent ESP packet of 84 bytes
No work to do; sleeping for 15000 ms...
Received ESP packet of 1460 bytes
No work to do; sleeping for 15000 ms...
Sent ESP packet of 116 bytes
No work to do; sleeping for 15000 ms...
Received ESP packet of 164 bytes
No work to do; sleeping for 15000 ms...
ping -c1 -W 2 -s 1395 host.tld - fails
Sent ESP packet of 116 bytes
No work to do; sleeping for 4000 ms...
Received ESP packet of 132 bytes
No work to do; sleeping for 15000 ms...
Sent ESP packet of 1444 bytes
Sent ESP packet of 100 bytes
No work to do; sleeping for 15000 ms...
Received ESP packet of 1460 bytes
Received ESP packet with invalid HMAC
No work to do; sleeping for 15000 ms...
ifconfig
tun0 Link encap:UNSPEC HWaddr
00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.150.4.56 P-t-P:10.150.4.56 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1400 Metric:1
RX packets:120 errors:0 dropped:0 overruns:0 frame:0
TX packets:135 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:23520 (23.5 KB) TX bytes:22269 (22.2 KB)
I also have some Wireshark captures showing "malformed packet" when
trying to open an RDP connection using Remmina.
More information about the openconnect-devel
mailing list