Page MenuHomePhabricator

output from "show vpn ipsec sa" bugged
Open, LowPublicBUG


olof@rou001:~$ show vpn ipsec sa
Traceback (most recent call last):
  File "/usr/libexec/vyos/op_mode/", line 86, in <module>
    hash = isa["integ-alg"].decode()
KeyError: 'integ-alg'

show vpn ipsec sa verbose output gives me what I want, with loads of verbosity
Version: VyOS 1.2.0-rolling+201904260337


Difficulty level
Unknown (require assessment)
VyOS 1.2.0-rolling+201904260337
Why the issue appeared?
Will be filled on close

Event Timeline

olofl created this task.May 2 2019, 8:07 PM
olofl added a comment.May 3 2019, 9:21 AM

As per request from dmbaturin on slack:

Could you give me the output of "sudo ipsec statusall"?

It gives me the same output as show vpn ipsec sa verbose

sudo ipsec status also works, but its not expected output.

expected output looks like this

olof@vpnrouter:~$ show vpn ipsec sa
Connection                      State    Up          Bytes In/Out    Remote address    Remote ID    Proposal
------------------------------  -------  ----------  --------------  ----------------  -----------  ------------------------------------------------
peer-    up       5 hours     4M/3M     N/A          AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024
peer-   up       80 minutes  42K/26K   N/A          AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024
peer-   up       80 minutes  0B/0B    N/A          AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024
peer-    up       5 hours     2M/938K    N/A          AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
pasik added a subscriber: pasik.May 4 2019, 1:28 PM
syncer triaged this task as Low priority.Aug 31 2019, 12:37 AM
syncer edited projects, added VyOS 1.3 Equuleus; removed VyOS 1.2 Crux.