Subject: racoon dumping core
To: None <current-users@netbsd.org>
From: Michael Santos <mike@ethmoid.org>
List: current-users
Date: 02/19/2001 10:22:41
racoon is dumping core on startup on my gateway server (running NetBSD 1.5S
as of Feb. 18). This behaviour has been occurring for about a month.

I've attached a copy of my racoon.conf below. Any suggestions?

Thanks!
-- 
Michael Santos
mike@ethmoid.org

Excerpt from a 'ktrace /usr/sbin/racoon':

<...>
  3869 racoon   CALL  sendto(0x3,0xbfbfcb6c,0x6b,0,0,0)
  3869 racoon   GIO   fd 3 wrote 107 bytes
       "<30>Feb 19 09:25:06 racoon: WARNING: pfkey.c:1977:pk_checkalg():
compr\
        ession algorithm can not be checked.
       "
  3869 racoon   RET   sendto 107/0x6b
  3869 racoon   CALL  ioctl(0x6,TIOCGETA,0xbfbfd360)
  3869 racoon   RET   ioctl -1 errno 25 Inappropriate ioctl for device
  3869 racoon   CALL  close(0x6)
  3869 racoon   RET   close 0
  3869 racoon   CALL  fork
  3869 racoon   RET   fork 3870/0xf1e
  3869 racoon   CALL  exit(0)

Excerpt from 'racoon -F -d':

2001-02-19 09:25:51: DEBUG: ipsec_doi.c:347:get_ph1approvalx(): hashtype = SHA:S
HA
2001-02-19 09:25:51: DEBUG: ipsec_doi.c:352:get_ph1approvalx(): authmethod = pre
-shared key:pre-shared key
2001-02-19 09:25:51: DEBUG: ipsec_doi.c:357:get_ph1approvalx(): dh_group = 1024-
bit MODP group:1024-bit MODP group
2001-02-19 09:25:51: DEBUG: ipsec_doi.c:379:get_ph1approvalx(): acceptable propo
sal found.
Memory fault (core dumped) 

racoon.conf:

path pre_shared_key "/etc/racoon/psk.txt" ;
remote anonymous
{
	exchange_mode aggressive,main,base;
	lifetime time 24 hour ;	# sec,min,hour
	proposal {
		encryption_algorithm 3des;
		hash_algorithm sha1;
		authentication_method pre_shared_key ;
		dh_group 2 ;
	}
}
sainfo anonymous
{
	pfs_group 1;
	lifetime time 12 hour ;
	lifetime byte 50 MB ;
	encryption_algorithm 3des, cast128, blowfish, des ;
	authentication_algorithm hmac_sha1, hmac_md5 ;
	compression_algorithm deflate ;
}