<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7036.0">
<TITLE>Null pointer error message</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=2 FACE="Arial">Hi,</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">I have a test system running that uses several UML guests with Openswan (2.4.7rc2, 2.6.18.1 kernel, KLIPS) configured. I'm able to establish and pass traffic over site-to-site tunnels, but when I enabled KLIPS debugging (spi & xform) I noticed the following error entry being generated for every packet that is encrypted and sent over the tunnel:</FONT></P>
<P><FONT SIZE=2 FACE="Arial">Oct 27 13:27:51 uml-5 kernel: klips_error:ipsec_sa_put: null pointer passed in!</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">This error is followed by:</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Oct 27 13:27:51 uml-5 kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=249 of SA:esp.a4919083@172.3.3.5 requested.</FONT></P>
<P><FONT SIZE=2 FACE="Arial">I get the same message on both sides on the tunnel. I see that there is a bug open on this (472) but it doesn't appear that bug has been updated for almost a year. Is this error message something I should be worried about? I added a note to the bug with the version information where I am still seeing the log message.</FONT></P>
<P><FONT SIZE=2 FACE="Arial">-mike</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Here are my configuration files for one side:</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">[root@uml-5 ~]# cat /etc/ipsec.conf</FONT>
<BR><FONT SIZE=2 FACE="Arial"># /etc/ipsec.conf - Openswan IPsec configuration file</FONT>
<BR><FONT SIZE=2 FACE="Arial"># RCSID $Id: ipsec.conf.in,v 1.15.2.2 2005/11/14 20:10:27 paul Exp $</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"># This file: /usr/share/doc/openswan/ipsec.conf-sample</FONT>
<BR><FONT SIZE=2 FACE="Arial">#</FONT>
<BR><FONT SIZE=2 FACE="Arial"># Manual: ipsec.conf.5</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">version 2.0 # conforms to second version of ipsec.conf specification</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"># global settings</FONT>
<BR><FONT SIZE=2 FACE="Arial">config setup</FONT>
<BR><FONT SIZE=2 FACE="Arial"> interfaces="ipsec0=eth1 ipsec1=eth2"</FONT>
<BR><FONT SIZE=2 FACE="Arial"> nat_traversal=yes</FONT>
<BR><FONT SIZE=2 FACE="Arial"> virtual_private=%v4:192.168.60.0/24</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"># disable implicit connections</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">conn clear</FONT>
<BR><FONT SIZE=2 FACE="Arial"> auto=ignore</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">conn clear-or-private</FONT>
<BR><FONT SIZE=2 FACE="Arial"> auto=ignore</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">conn private-or-clear</FONT>
<BR><FONT SIZE=2 FACE="Arial"> auto=ignore</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">conn private</FONT>
<BR><FONT SIZE=2 FACE="Arial"> auto=ignore</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">conn block</FONT>
<BR><FONT SIZE=2 FACE="Arial"> auto=ignore</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">conn packetdefault</FONT>
<BR><FONT SIZE=2 FACE="Arial"> auto=ignore</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">include /etc/ipsec.d/tunnels/peer-172.4.4.7-tunnel-1</FONT>
<BR><FONT SIZE=2 FACE="Arial">[root@uml-5 ~]#</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"><<<<<<<<<<<<>>>>>>>>>>>>>></FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">[root@uml-5 ~]# cat /etc/ipsec.d/tunnels/peer-172.4.4.7-tunnel-1</FONT>
<BR><FONT SIZE=2 FACE="Arial">conn peer-172.4.4.7-tunnel-1</FONT>
<BR><FONT SIZE=2 FACE="Arial"> left=172.3.3.5</FONT>
<BR><FONT SIZE=2 FACE="Arial"> leftsubnet=192.168.40.0/24</FONT>
<BR><FONT SIZE=2 FACE="Arial"> right=172.4.4.7</FONT>
<BR><FONT SIZE=2 FACE="Arial"> rightsubnet=192.168.60.0/24</FONT>
<BR><FONT SIZE=2 FACE="Arial"> authby=secret</FONT>
<BR><FONT SIZE=2 FACE="Arial"> auto=start</FONT>
<BR><FONT SIZE=2 FACE="Arial"> ike="aes256-sha1,aes128-sha1"</FONT>
<BR><FONT SIZE=2 FACE="Arial"> ikelifetime=3600s</FONT>
<BR><FONT SIZE=2 FACE="Arial"> esp="aes256-sha1,3des-md5"</FONT>
<BR><FONT SIZE=2 FACE="Arial"> keylife=1800s</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">[root@uml-5 ~]#</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"><<<<<<<<<<<<<<<>>>>>>>>>>></FONT>
</P>
<BR>
<BR>
</BODY>
</HTML>