Bug 277485

Version:           0.9.6 (using KDE 4.6.2) 
OS:                Linux

In openswan ipsec mode the keylife entry in the config file is too short (identical too ikelifetime):

stream << "    keylife=1200s" << "\n";
stream << "    ikelifetime=1200s" << "\n";

Basically the connection is stable, but you get many quickstate errors at the other end of the connection.

If i understand it right, keylife should be normally larger than ikelifetime.
With the following settings the errors are gone:

stream << "    keylife=3600s" << "\n";
stream << "    ikelifetime=1200s" << "\n";


Reproducible: Always

Steps to Reproduce:
View error logs at the other end of the connection in openswan ipsec mode.


Expected Results:  
No errors