<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:arial, helvetica, sans-serif;font-size:10pt"><DIV></DIV>
<DIV>Hi ,</DIV>
<DIV style="FONT-SIZE: 10pt; FONT-FAMILY: arial, helvetica, sans-serif">
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif">
<DIV style="FONT-SIZE: 10pt; FONT-FAMILY: arial, helvetica, sans-serif">
<DIV> </DIV>
<DIV>I am using Linux kernel 2.6.20 and openswan-2.5.18dr3 for creating tunnels.During kernel compilation in <FONT color=#007f40>make menuconfig-->cryptographic options</FONT>, i checked the options of Blowfish,Twofish and Serpent Cipher algorithms and installed new kernel<BR><BR>In making openswan-2.5.18dr3, i am doing following step:-</DIV>
<DIV> </DIV>
<DIV>source:- <A href="http://wiki.openswan.org/index.php/BuildingFromTarballsFor2/6" target=_blank rel=nofollow><FONT color=#810081>http://wiki.openswan.org/index.php/BuildingFromTarballsFor2/6</FONT></A></DIV>
<DIV> </DIV>
<DIV>
<P class=vspace>1) make programs<BR></P>
<P class=vspace>2) make install<BR></P>
<P class=vspace>3) make nattpatch2.6 > ../nat-t-patch-2.6.diff<BR><BR> cd ../linux<BR><BR> patch -p1<../nat-t-patch-2.6.diff<BR><BR> make menuconfig and enable Networking / Networking options / IPSEC Nat-Traversal<BR><BR> recompile and install new kernel.<BR></P>
<DIV><FONT color=#c00000>This results in error in /net/ipv4/udp.c during the make of kernel.</FONT></DIV>
<DIV> </DIV>
<P class=vspace>4) From the openswan source directory: </P>
<DIV class=vspace></DIV><PRE> export KERNELSRC=/lib/modules/`uname -r`/build
make module26
make minstall26
depmod -a
</PRE></DIV>
<DIV> </DIV>
<DIV>If i skip step3 and make openswan than i am able to establish tunnels between two hosts(both using linux kernel 2.6.20 and openswan-2.5.18dr3)with 3des,aes,aes128 and aes256 algorithms.But i am not able to establish tunnels with Blowfish,serpent and twofish algorithms. <BR></DIV>
<DIV>When i give command from shell "ipsec auto --up net-net" than it gives following errors:-<BR><BR>For Blowfish:-<BR><BR>003 "net-net": requested kernel enc ealg_id=7 not present<BR>034 "net-net": can not initiate: no acceptable kernel algorithms loaded<BR><BR>For Serpent:-<BR><BR>003 "net-net": requested kernel enc ealg_id=252 not present<BR>034 "net-net": can not initiate: no acceptable kernel algorithms loaded<BR><BR>For Twofish:-<BR><BR>003 "net-net": requested kernel enc ealg_id=252 not present<BR>034 "net-net": can not initiate: no acceptable kernel algorithms loaded<BR></DIV>
<DIV>kindly tell me is there any algorithms patch required to support blowfish,serpent and twofish, or i need to patch kernel.</DIV>
<DIV>I have also made a report on <A href="http://bugs.xelerance.com/" target=_blank rel=nofollow>http://bugs.xelerance.com</A> which is available on link <A href="http://bugs.xelerance.com/bug_view_advanced_page.php?bug_id=923#bugnotes" target=_blank rel=nofollow>http://bugs.xelerance.com/bug_view_advanced_page.php?bug_id=923#bugnotes</A></DIV>
<DIV> </DIV>
<DIV>I come to know that enable KLIPS Crypto API may solve this problem, but i am not quite sure how to enable KLIPS Crypto API as i have checked all options in <FONT color=#007f40>make menuconfig-->cryptographic options</FONT></DIV>
<DIV> </DIV>
<DIV>I will be highly thankfull, if any of you throw some light on this issue.</DIV>
<DIV> </DIV>
<DIV>Thanks</DIV>
<DIV>Ankit</DIV></DIV><BR>
<HR SIZE=1>
You rock. That's why Blockbuster's offering you <A href="http://us.rd.yahoo.com/evt=47523/*http://tc.deals.yahoo.com/tc/blockbuster/text5.com" target=_blank rel=nofollow>one month of Blockbuster Total Access</A>, No Cost.</DIV></DIV></div><br>__________________________________________________<br>Do You Yahoo!?<br>Tired of spam? Yahoo! Mail has the best spam protection around <br>http://mail.yahoo.com </body></html>