Libreswan 3.32 (Alpine 3.12.0) doesn't start - ABORT: ASSERTION FAILED: test_gcm_vectors(&ike_alg_encrypt_aes_gcm_16, aes_gcm_tests) (in test_ike_alg() at ike_alg_test.c:41)
After updating from Alpine 3.11.6 to 3.12.0 Libreswan stopped working - it was updated from 3.29 to 3.32. The errors are:
Jun 16 08:38:37 firewall2 authpriv.warn pluto[2406]: NSS: AEAD decryption using AES_GCM_16_128 and PK11_Decrypt() failed (SECERR: 2 (0x2): security library: received bad data.)
Jun 16 08:38:37 firewall2 authpriv.warn pluto[2406]: NSS: AEAD encryption using AES_GCM_16_128 and PK11_Encrypt() failed (SECERR: 2 (0x2): security library: received bad data.)
Jun 16 08:38:37 firewall2 authpriv.warn pluto[2406]: one block
Jun 16 08:38:37 firewall2 authpriv.warn pluto[2406]: NSS: AEAD decryption using AES_GCM_16_128 and PK11_Decrypt() failed (SECERR: 2 (0x2): security library: received bad data.)
Jun 16 08:38:37 firewall2 authpriv.warn pluto[2406]: NSS: AEAD encryption using AES_GCM_16_128 and PK11_Encrypt() failed (SECERR: 2 (0x2): security library: received bad data.)
Jun 16 08:38:37 firewall2 authpriv.warn pluto[2406]: two blocks
Jun 16 08:38:37 firewall2 authpriv.warn pluto[2406]: NSS: AEAD decryption using AES_GCM_16_128 and PK11_Decrypt() failed (SECERR: 2 (0x2): security library: received bad data.)
Jun 16 08:38:37 firewall2 authpriv.warn pluto[2406]: NSS: AEAD encryption using AES_GCM_16_128 and PK11_Encrypt() failed (SECERR: 2 (0x2): security library: received bad data.)
Jun 16 08:38:37 firewall2 authpriv.warn pluto[2406]: two blocks with associated data
Jun 16 08:38:37 firewall2 authpriv.warn pluto[2406]: NSS: AEAD decryption using AES_GCM_16_128 and PK11_Decrypt() failed (SECERR: 2 (0x2): security library: received bad data.)
Jun 16 08:38:37 firewall2 authpriv.warn pluto[2406]: NSS: AEAD encryption using AES_GCM_16_128 and PK11_Encrypt() failed (SECERR: 2 (0x2): security library: received bad data.)
Jun 16 08:38:37 firewall2 authpriv.err pluto[2406]: ABORT: ASSERTION FAILED: test_gcm_vectors(&ike_alg_encrypt_aes_gcm_16, aes_gcm_tests) (in test_ike_alg() at ike_alg_test.c:41)
Downgrading just Libreswan from 3.32 to 3.29 fixed the problem.
Attached are all the 'messages' lines for Libreswan startup.
Adding some tags as per #alpine-linux IRC advice: @Leo @fabled