openwrt / openwrt/packages

libreswan ipsec config builder bug

Open Beginner friendly
#25,221 3 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Makefile
Stars
4.6k
Forks
4k
Avg merge
3d 12h
Merged PRs (30d)
134

Description

Maintainer: @jempatel
OpenWrt version

r27500-df1011e0b7

OpenWrt release

SNAPSHOT

OpenWrt target/subtarget

x86/64

Device

Red Hat KVM

Image kind

Official downloaded image

Description:
If I try to create the left subnet of 10.250.0.0/16 the libreswan config ends up with a leftsubnets value of 0.0.0.0/0

I believe that this is bacause the /etc/init.d/ipsec uses ` [[ "$leftsubnets" =~ 0.0.0.0* ]] && leftsubnets="0.0.0.0/0"`

I think this should be `=~ 0\.0\.0\.0.*` but my shell knowledge is not great enough to be sure.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start in /etc/init.d/ipsec, focusing on the leftsubnets pattern mentioned in the issue and how the libreswan configuration is built. Reproduce the configuration with a left subnet of 10.250.0.0/16, then verify that it remains that subnet instead of being changed to 0.0.0.0/0.

Written by the indexing model from the issue text.

Assessment

Tech stack
shell
Domain
networking, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Clearly specified
Newbie friendliness
72/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.