<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Hi, I have problems building a klips kernel in FC4. So nobody posts
replys that I can use NETKEY, I really need KLIPS.<br>
<br>
When I run ipsec verify i get these messages:<br>
[root@server1 sbin]# ipsec verify<br>
Checking your system to see if IPsec got installed and started
correctly:<br>
Version check and ipsec on-path [OK]<br>
Linux Openswan 2.4.0 (klips)<br>
Checking for IPsec support in kernel [OK]<br>
Checking for RSA private key (/etc/ipsec.secrets) [OK]<br>
Checking that pluto is running [FAILED]<br>
whack: is Pluto running? connect() for "/var/run/pluto/pluto.ctl"
failed (111 Connection refused)<br>
Two or more interfaces found, checking IP forwarding [FAILED]<br>
whack: is Pluto running? connect() for "/var/run/pluto/pluto.ctl"
failed (111 Connection refused)<br>
Checking NAT and MASQUERADEing [OK]<br>
Checking for 'ip' command [OK]<br>
Checking for 'iptables' command [OK]<br>
Opportunistic Encryption Support
[DISABLED]<br>
<br>
These are the steps I did to build my kernel.<br>
mv openswan* /usr/src/<br>
tar -zxvf openswan-2.4.0.tar.gz<br>
gunzip openswan-2.4.0.kernel-2.6-klips.patch.gz<br>
gunzip openswan-2.4.0.kernel-2.6-natt.patch.gz<br>
bzip2 -cd linux-2.6.12.1.tar.bz2 | tar xvf - -C /usr/src/<br>
cd /usr/src/linux-2.6.12.1/<br>
patch -p1<../openswan-2.4.0.kernel-2.6-klips.patch<br>
patch -p1<../openswan-2.4.0.kernel-2.6-natt.patch<br>
make mrproper<br>
cd /usr/src/<br>
ln -s linux-2.6.12.1 linux<br>
make oldconfig<br>
make menuconfig<br>
enable Networking / Networking options / IPSEC Nat-Traversal<br>
enable Networking / Networking options / Openswan IPsec (KLIPS26) as a
module "M"<br>
make all<br>
make modules_install<br>
make install<br>
edit /etc/grub.conf so it boots the new kernel<br>
reboot<br>
cd /usr/src/openswan-2.4.0<br>
export KERNELSRC=/lib/modules/`uname -r`/build<br>
make module26<br>
make minstall26<br>
depmod -a<br>
modprobe ipsec<br>
make programs<br>
make install<br>
<br>
ipsec --version<br>
Linux Openswan 2.4.0 (klips)<br>
See `ipsec --copyright' for copyright information.<br>
<br>
reboot<br>
ipsec verify<br>
Checking your system to see if IPsec got installed and started
correctly:<br>
Version check and ipsec on-path [OK]<br>
Linux Openswan 2.4.0 (klips)<br>
Checking for IPsec support in kernel [OK]<br>
Checking for RSA private key (/etc/ipsec.secrets) [OK]<br>
Checking that pluto is running [FAILED]<br>
whack: is Pluto running? connect() for "/var/run/pluto/pluto.ctl"
failed (111 Connection refused)<br>
Two or more interfaces found, checking IP forwarding [FAILED]<br>
whack: is Pluto running? connect() for "/var/run/pluto/pluto.ctl"
failed (111 Connection refused)<br>
Checking NAT and MASQUERADEing [OK]<br>
Checking for 'ip' command [OK]<br>
Checking for 'iptables' command [OK]<br>
Opportunistic Encryption Support
[DISABLED]<br>
<br>
Have I done something wrong when I built the new kernel or is it
something else that is wrong?<br>
<br>
/Ola<br>
<br>
<br>
<div class="moz-signature">-- <br>
<p><font face="Tahoma" size="2">Ola Albertsson<br>
Qwert Cyberstore AB<br>
Romansvägen 6<br>
131 04 Nacka</font></p>
<p><font face="Tahoma" size="2">Phone: +46 (0)8 556 74 478<br>
Cell: +46 (0)736 17 22 85<br>
Fax: +46 (0)8 601 96 89</font></p>
<p><font face="Tahoma" size="2"><a href="http://www.cyberstore.se">www.cyberstore.se</a>
<a href="mailto:oa@cyberstore.se">oa@cyberstore.se</a> </font></p>
</div>
</body>
</html>