- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Mar 16 2026
Mar 15 2026
I observed some issues with rekey related to this ticket. With this patch enabled in vpp rekeying the child_sa is not working properly. It seems like the kernel sometimes will send a expired message for the newly established child SA.
In the strongswan logs you will see received a XFRM_MSG_EXPIRE and subsequent deletion of the new child sa. Sometimes rekeying will succeed, sometimes there will be 30 or more keyexchanges in a row.
Mar 14 2026
Mar 13 2026
Mar 12 2026
The default config for an image targeted for such platforms must contain set system console device ttyAMA0, which I think is still missing there.
Not reproduced anymore
Probably was fixed here https://github.com/vyos/vyos-1x/commit/e8c6a8f37470416e72a26fbbdfad24f8dcea7208
The most popular client (https://github.com/certnanny/sscep) seems unmaintained now. We'll need to check if there's anything else or see if we can help with its maintenance.
Mar 11 2026
PR:
https://github.com/vyos/vyos-1x/pull/5046
in draft until required companion PRs are merged.
This issue remained hidden because most malformed ranges like 192.0.2.100-192.0.2.100 were detected correctly.
This bug will be fixed with T8374