{"action":"created","issue":{"url":"https://api.github.com/repos/dlenski/openconnect/issues/89","repository_url":"https://api.github.com/repos/dlenski/openconnect","labels_url":"https://api.github.com/repos/dlenski/openconnect/issues/89/labels{/name}","comments_url":"https://api.github.com/repos/dlenski/openconnect/issues/89/comments","events_url":"https://api.github.com/repos/dlenski/openconnect/issues/89/events","html_url":"https://github.com/dlenski/openconnect/issues/89","id":294993325,"number":89,"title":"MTU changes on tunnel renegotiation","user":{"login":"milligana","id":660895,"avatar_url":"https://avatars1.githubusercontent.com/u/660895?v=4","gravatar_id":"","url":"https://api.github.com/users/milligana","html_url":"https://github.com/milligana","followers_url":"https://api.github.com/users/milligana/followers","following_url":"https://api.github.com/users/milligana/following{/other_user}","gists_url":"https://api.github.com/users/milligana/gists{/gist_id}","starred_url":"https://api.github.com/users/milligana/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/milligana/subscriptions","organizations_url":"https://api.github.com/users/milligana/orgs","repos_url":"https://api.github.com/users/milligana/repos","events_url":"https://api.github.com/users/milligana/events{/privacy}","received_events_url":"https://api.github.com/users/milligana/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-02-07T03:20:36Z","updated_at":"2018-02-08T14:41:04Z","closed_at":null,"author_association":"NONE","body":"\r\n# Problem description\r\n\r\n1. I ran openconnect-gp as follows: `openconnect --protocol=gp \r\n2. But on renegotiation after timeout; a different MTU is set - and I cannot use ssh through the tunnel:\r\n\r\nPOST https://xxx.xxx.xxx.xxx/ssl-vpn/login.esp\r\nConnected to xxx.xxx.xxx.xxx:443\r\nSSL negotiation with xxx.xxx.xxx.xxx\r\nServer certificate verify failed: signer not found\r\nConnected to HTTPS on xxx.xxx.xxx.xxx\r\nGlobalProtect login returned authentication-source=xxx-LDAP-Auth\r\nPOST https://xxx.xxx.xxx.xxx/ssl-vpn/getconfig.esp\r\nTunnel timeout (rekey interval) is 180 minutes.\r\nNo MTU received. Calculated **1422**\r\nPOST https://xxx.xxx.xxx.xxx/ssl-vpn/hipreportcheck.esp\r\nConnected as xxx.xxx.x.xxx, using SSL\r\nESP session established with server\r\nESP tunnel connected; exiting HTTPS mainloop.\r\n1517958732066\taddons.update-checker\tWARN\tUpdate manifest for {972ce4c6-7e08-4474-a285-3208198ce6fd} did not contain an updates property\r\nGlobalProtect rekey due\r\nPOST https://xxx.xxx.xxx.xxx/ssl-vpn/getconfig.esp\r\nSSL negotiation with xxx.xxx.xxx.xxx\r\nServer certificate verify failed: signer not found\r\nConnected to HTTPS on xxx.xxx.xxx.xxx\r\nTunnel timeout (rekey interval) is 180 minutes.\r\nNo MTU received. Calculated **1391**\r\nPOST https://xxx.xxx.xxx.xxx/ssl-vpn/hipreportcheck.esp\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/dlenski/openconnect/issues/comments/364131681","html_url":"https://github.com/dlenski/openconnect/issues/89#issuecomment-364131681","issue_url":"https://api.github.com/repos/dlenski/openconnect/issues/89","id":364131681,"user":{"login":"dlenski","id":128716,"avatar_url":"https://avatars1.githubusercontent.com/u/128716?v=4","gravatar_id":"","url":"https://api.github.com/users/dlenski","html_url":"https://github.com/dlenski","followers_url":"https://api.github.com/users/dlenski/followers","following_url":"https://api.github.com/users/dlenski/following{/other_user}","gists_url":"https://api.github.com/users/dlenski/gists{/gist_id}","starred_url":"https://api.github.com/users/dlenski/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dlenski/subscriptions","organizations_url":"https://api.github.com/users/dlenski/orgs","repos_url":"https://api.github.com/users/dlenski/repos","events_url":"https://api.github.com/users/dlenski/events{/privacy}","received_events_url":"https://api.github.com/users/dlenski/received_events","type":"User","site_admin":false},"created_at":"2018-02-08T14:41:04Z","updated_at":"2018-02-08T14:41:04Z","author_association":"OWNER","body":"Probably the right thing for me to do here is not to re-calculate the MTU upon reconnection, but I'd still like to see why the ESP reconnection is failing from the detailed logs."}}
{"actor":{"display_login":"dlenski"}}