Hi friends,
Sorry for asking a trivial question to all of you.. but i am really stuck.
Please reply if you have any idea.
I tried to search on the Mailing archieves, and got that this could be a version problem, but still I am not sure how to solve it.
Please help
I got into this problem, while trying to Eshtablish SA in openswan.
PS: I am installing on Red-Hat Linux-9.0,
Kernel 2.4.20-30.9.
I ran:-->
ipsec spi --af inet --edst 10.232.40.40 --spi 0x123 \
--proto esp --esp 3des-md5-96 \
--authkey 0s+aadddeeeefffff2 --enckey 0s+aadddeeeefffff2
And Got this, after switching Debug option ON:-->
ipsec spi --debug `cat /home/in1064c/spidata`
/usr/local/libexec/ipsec/spi: edst=10.232.40.40.
/usr/local/libexec/ipsec/spi: Algorithm 10 selected.
/usr/local/libexec/ipsec/spi: All options processed.
/usr/local/libexec/ipsec/spi: SA valid.
/usr/local/libexec/ipsec/spi: Algorithm ok.
pfkey_lib_debug:pfkey_msg_hdr_build:
pfkey_lib_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0p0xbfffd390 pfkey_ext=0p0xbfffe4f0 *pfkey_ext=0p(nil).
pfkey_lib_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0p0xbfffd390 pfkey_ext=0p0xbfffe4f0 *pfkey_ext=0p0x8064790.
pfkey_lib_debug:pfkey_sa_build: spi=00000123 replay=0 sa_state=1 auth=2 encrypt=3 flags=0
/usr/local/libexec/ipsec/spi: extensions[0]=0p0x8064790 previously set with msg_hdr.
/usr/local/libexec/ipsec/spi: assembled SA extension, pfkey msg authalg=2 encalg=3.
/usr/local/libexec/ipsec/spi: i=0, j=0, life_opt[0][0]=0p(nil), life[0][0]=0
/usr/local/libexec/ipsec/spi: i=0, j=1, life_opt[0][1]=0p(nil), life[0][1]=0
/usr/local/libexec/ipsec/spi: i=0, j=2, life_opt[0][2]=0p(nil), life[0][2]=0
/usr/local/libexec/ipsec/spi: i=0, j=3, life_opt[0][3]=0p(nil), life[0][3]=0
/usr/local/libexec/ipsec/spi: i=0, j=4, life_opt[0][4]=0p(nil), life[0][4]=0
/usr/local/libexec/ipsec/spi: i=1, j=0, life_opt[1][0]=0p(nil), life[1][0]=0
/usr/local/libexec/ipsec/spi: i=1, j=1, life_opt[1][1]=0p(nil), life[1][1]=0
/usr/local/libexec/ipsec/spi: i=1, j=2, life_opt[1][2]=0p(nil), life[1][2]=0
/usr/local/libexec/ipsec/spi: i=1, j=3, life_opt[1][3]=0p(nil), life[1][3]=0
/usr/local/libexec/ipsec/spi: i=1, j=4, life_opt[1][4]=0p(nil), life[1][4]=0
/usr/local/libexec/ipsec/spi: assembling address_s extension (0.0.0.0).
pfkey_lib_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0
pfkey_lib_debug:pfkey_address_build: found address family AF_INET.
pfkey_lib_debug:pfkey_address_build: found address=0.0.0.0:0.
pfkey_lib_debug:pfkey_address_build: successful created len: 3.
pfkey_lib_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0
pfkey_lib_debug:pfkey_address_build: found address family AF_INET.
pfkey_lib_debug:pfkey_address_build: found address=10.232.40.40:0.
pfkey_lib_debug:pfkey_address_build: successful created len: 3.
pfkey_lib_debug:pfkey_key_build:
/usr/local/libexec/ipsec/spi: key_a extension assembled.
pfkey_lib_debug:pfkey_key_build:
/usr/local/libexec/ipsec/spi: key_e extension assembled.
/usr/local/libexec/ipsec/spi: assembling pfkey msg....
pfkey_lib_debug:pfkey_msg_build: pfkey_msg=0p0x8064848 allocated 136 bytes, &(extensions[0])=0p0xbfffe4f0
pfkey_lib_debug:pfkey_msg_build: copying 24 bytes from extensions[1] (type=1)
pfkey_lib_debug:pfkey_msg_build: copying 24 bytes from extensions[5] (type=5)
pfkey_lib_debug:pfkey_msg_build: copying 24 bytes from extensions[6] (type=6)
pfkey_lib_debug:pfkey_msg_build: copying 24 bytes from extensions[8] (type=8)
pfkey_lib_debug:pfkey_msg_build: copying 24 bytes from extensions[9] (type=9)
pfkey_lib_debug:pfkey_msg_build: extensions permitted=78001ffb, seen=00000363, required=00000063.
pfkey_lib_debug:pfkey_msg_parse: parsing message ver=2, type=3(add), errno=0, satype=3(ESP), len=17, res=0, seq=1, pid=14040.
pfkey_lib_debug:pfkey_msg_parse: satype 3(ESP) conversion to proto gives 50 for msg_type 3(add).
pfkey_lib_debug:pfkey_msg_parse: remain=15
pfkey_lib_debug:pfkey_msg_parse: extensions permitted=78001ffb, required=00000063.
pfkey_lib_debug:pfkey_msg_parse: parsing ext type=1(security-association) remain=15.
pfkey_lib_debug:pfkey_msg_parse: remain=15 ext_type=1(security-association) ext_len=3 parsing ext 0p0x8064858 with parser pfkey_sa_parse.
pfkey_lib_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00000123 replay=0 state=1 auth=2 encrypt=3 flags=0 ref=-1.
pfkey_lib_debug:pfkey_msg_parse: Extension 1(security-association) parsed.
pfkey_lib_debug:pfkey_msg_parse: parsing ext type=5(source-address) remain=12.
pfkey_lib_debug:pfkey_msg_parse: remain=12 ext_type=5(source-address) ext_len=3 parsing ext 0p0x8064870 with parser pfkey_address_parse.
pfkey_lib_debug:pfkey_address_parse: found exttype=5(source-address) family=2(AF_INET) address=0.0.0.0 proto=0 port=0.
pfkey_lib_debug:pfkey_address_parse: successful.
pfkey_lib_debug:pfkey_msg_parse: Extension 5(source-address) parsed.
pfkey_lib_debug:pfkey_msg_parse: parsing ext type=6(destination-address) remain=9.
pfkey_lib_debug:pfkey_msg_parse: remain=9 ext_type=6(destination-address) ext_len=3 parsing ext 0p0x8064888 with parser pfkey_address_parse.
pfkey_lib_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=10.232.40.40 proto=0 port=0.
pfkey_lib_debug:pfkey_address_parse: successful.
pfkey_lib_debug:pfkey_msg_parse: Extension 6(destination-address) parsed.
pfkey_lib_debug:pfkey_msg_parse: parsing ext type=8(authentication-key) remain=6.
pfkey_lib_debug:pfkey_msg_parse: remain=6 ext_type=8(authentication-key) ext_len=3 parsing ext 0p0x80648a0 with parser pfkey_key_parse.
pfkey_lib_debug:pfkey_key_parse: success, found len=3 exttype=8(authentication-key) bits=96 reserved=0.
pfkey_lib_debug:pfkey_msg_parse: Extension 8(authentication-key) parsed.
pfkey_lib_debug:pfkey_msg_parse: parsing ext type=9(cipher-key) remain=3.
pfkey_lib_debug:pfkey_msg_parse: remain=3 ext_type=9(cipher-key) ext_len=3 parsing ext 0p0x80648b8 with parser pfkey_key_parse.
pfkey_lib_debug:pfkey_key_parse: success, found len=3 exttype=9(cipher-key) bits=96 reserved=0.
pfkey_lib_debug:pfkey_msg_parse: Extension 9(cipher-key) parsed.
pfkey_lib_debug:pfkey_msg_parse: extensions permitted=78001ffb, seen=00000363, required=00000063.
/usr/local/libexec/ipsec/spi: assembled.
/usr/local/libexec/ipsec/spi: writing pfkey msg.
/usr/local/libexec/ipsec/spi: pfkey write failed (errno=22): Invalid argument, check kernel log messages for specifics.
Thanks in advance.<hr><font face="Arial" size="2">Indiatimes Email now powered by <b>APIC Advantage</b>. <a href="http://email.indiatimes.com/apic/">Help!</a> </font><br><DIV align=left><a target="_blank" href="http://imaround.indiatimes.com/IMaround/presencefr.mss?userid=love_myself" ><IMG alt="My Presence" border=0 src="http://203.199.93.51/IMaround/getpresence.mss?userid=love_myself" ></a><a target="_blank" href="http://email.indiatimes.com/apic/userpage.html"><FONT face="Arial" size=2>Help</font></a></DIV><hr><br><DIV align="left"><object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=5,0,0,0" width="360" height="80"><param name="movie" value="http://203.199.93.12/image/swap.swp"><param name="quality" value="high"><embed src="http://203.199.93.12/image/swap.swp" quality="high" pluginspage="http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash" type="
a!
pplication/x-shockwave-flash" width="360" height="80"></embed></object></DIV>