[Openswan Users] KLIPS openswan 2.4.0 Kernel 2.6.12 Fedora Core 4

[Paul Wouters]

On Mon, 15 May 2006, Ola Albertsson wrote:

> Hi, I have problems building a klips kernel in FC4. So nobody posts replys
> that I can use NETKEY, I really need KLIPS.
>
> When I run ipsec verify i get these messages:
> [root at server1 sbin]# ipsec verify
> Checking your system to see if IPsec got installed and started correctly:
> Version check and ipsec on-path                                 [OK]
> Linux Openswan 2.4.0 (klips)

Upgrade.

> reboot
> ipsec verify
> Checking your system to see if IPsec got installed and started correctly:
> Version check and ipsec on-path                                 [OK]
> Linux Openswan 2.4.0 (klips)
> Checking for IPsec support in kernel                            [OK]
> Checking for RSA private key (/etc/ipsec.secrets)               [OK]
> Checking that pluto is running                                  [FAILED]
> whack: is Pluto running?  connect() for "/var/run/pluto/pluto.ctl" failed (111
> Connection refused)

Start openswan and then run ipsec verify

> Two or more interfaces found, checking IP forwarding            [FAILED]

If you are going to setup a subnet for routing, then you need to enable
forwarding in /etc/sysctl.conf

> Opportunistic Encryption Support                                [DISABLED]

That's fine.

> Have I done something wrong when I built the new kernel or is it something
> else that is wrong?

You just didnt start it. And you are using an old version.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155