Re: [Ipsec-tools-devel] racoon+NAT-T and racoon+debug+IPv6 not so happy?

[Timo Teräs <timo.teras%iki.fi@localhost>]

S.P.Zeidler wrote:
> before I unpack digging equipment:
> 
> is it old news that racoon and a kernel with NAT-T [1] will result in a
> failure to do IPSEC because the pfkey update about NAT-T fails in phase 2
> and racoon decides to fail the entire connection?

Is this a recent regression? What version you are using? Latest CVS?
Tomas / Yvan did some NAT-T related stuff on 2008-09-03/-09-09. Those
might be related.
 
> And also that you may get 'racoon: stack overflow detected; terminated'
> when using racoon -F -d and IPv6 at the same time? The latter is
> restricted to the debug mode, just racoon -F doesn't go splat.

I haven't really used racoon with IPv6, but this definitely sounds like
a bug. If you can provide a backtrace that'd be great.

Cheers,
  Timo