<div dir="ltr">Hi All,<br><br>ok, I upgraded my kernel and everything is resolved .. successfully started service ipsec start but verification says that ipsec not supported by kernel; here is the verify result...<br><br>root@vps:~# service ipsec start<br>
ipsec_setup: Starting Openswan IPsec 2.6.31...<br>ipsec_setup: multiple ip addresses, using 127.0.0.1 on venet0<br>root@vps:~#<br>root@vps:~#<br>root@vps:~# ipsec verify<br>Checking your system to see if IPsec got installed and started correctly:<br>
Version check and ipsec on-path [OK]<br>Linux Openswan U2.6.31/K(no kernel code presently loaded)<br style="background-color: rgb(255, 0, 0);"><span style="background-color: rgb(255, 0, 0);">Checking for IPsec support in kernel [FAILED]</span><br>
SAref kernel support [N/A]<br>Checking that pluto is running [OK]<br>Pluto listening for IKE on udp 500 [FAILED]<br>
Pluto listening for NAT-T on udp 4500 [FAILED]<br>Checking for 'ip' command [OK]<br>Checking for 'iptables' command [OK]<br>
Opportunistic Encryption Support [DISABLED]<br><br><br>Kindly help here.<br><br>Regards,<br>Hammad<br><br><div class="gmail_quote">On Thu, Dec 2, 2010 at 11:20 AM, Hammad <span dir="ltr"><<a href="mailto:raohammad@gmail.com">raohammad@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div dir="ltr"><div>Hi Paul/Bob</div>
<div>
<div> </div>
<div>This is strange for me too. depmod also gives me the same error witha mdoule missing;</div>
<div><br><a href="mailto:root@flexilogix" target="_blank">root@flexilogix</a>:~# depmod -a<br>WARNING: Couldn't open directory /lib/modules/2.6.18-028stab068.9: No such file or directory<br>FATAL: Could not open /lib/modules/2.6.18-028stab068.9/modules.dep.temp for writing: No such file or directory<br>
</div>
<div>and when I run ipsec verify; i get that my kernel is not ready to support IPSec even.</div>
<div><br><a href="mailto:root@flexilogix" target="_blank">root@flexilogix</a>:~# ipsec verify<br>Checking your system to see if IPsec got installed and started correctly:<br>Version check and ipsec on-path [OK]<br>
Linux Openswan U2.6.31/K(no kernel code presently loaded)<br><font style="background-color: rgb(255, 0, 0);">Checking for IPsec support in kernel [FAILED]</font><br>SAref kernel support [N/A]<br>
<font style="background-color: rgb(255, 0, 0);">Checking that pluto is running [FAILED]</font><br> whack: Pluto is not running (no "/var/run/pluto/pluto.ctl")<br>Checking for 'ip' command [OK]<br>
Checking for 'iptables' command [OK]<br>Opportunistic Encryption Support [DISABLED]<br></div>
<div> </div>
<div>Regards,</div>
<div>Hammad</div><font color="#888888">
<div>+923234559119</div><br><br></font></div><div><div></div><div class="h5">
<div class="gmail_quote">On Wed, Dec 1, 2010 at 11:55 PM, Paul Wouters <span dir="ltr"><<a href="mailto:paul@xelerance.com" target="_blank">paul@xelerance.com</a>></span> wrote:<br>
<blockquote style="border-left: 1px solid rgb(204, 204, 204); margin: 0px 0px 0px 0.8ex; padding-left: 1ex;" class="gmail_quote">
<div>On Wed, 1 Dec 2010, Hammad wrote:<br><br>
<blockquote style="border-left: 1px solid rgb(204, 204, 204); margin: 0px 0px 0px 0.8ex; padding-left: 1ex;" class="gmail_quote">1- Fresh installation of ubuntu<br>Linux <a href="http://flexilogix.com/" target="_blank">flexilogix.com</a> 2.6.18-028stab068.9 #1 SMP Tue Mar 30 17:22:31 MSD 2010 i686 GNU/Linux<br>
<br>2- Install utilities for openswan source compilation on ubuntu<br>build-essential<br>libgmp3-dev<br>bison<br>libgmp-ocaml-dev<br>flex<br>xmlto<br><br>3- Compile and install openswan from source (openswan-2.6.31.tar.gz)<br>
<br>cd /usr/src/openswan-2.#.#<br> make programs<br> make install<br>Once installation is succesfful; service start gives following response....<br></blockquote><br></div>So this is not using klips.
<div><br><br>
<blockquote style="border-left: 1px solid rgb(204, 204, 204); margin: 0px 0px 0px 0.8ex; padding-left: 1ex;" class="gmail_quote">root@flexilogix:/usr/src/openswan-2.6.31# service ipsec start<br>ipsec_setup: Starting Openswan IPsec 2.6.31...<br>
ipsec_setup: No KLIPS support found while requested, desperately falling back to netkey<br></blockquote><br></div>you have protostack=klips but no klips, so you should either compile klips or change to use protostack=netkey
<div><br><br>
<blockquote style="border-left: 1px solid rgb(204, 204, 204); margin: 0px 0px 0px 0.8ex; padding-left: 1ex;" class="gmail_quote">ipsec_setup: FATAL: Could not load /lib/modules/2.6.18-028stab068.9/modules.dep: No such file or directory<br>
ipsec_setup: Even NETKEY support is not there, aborting<br></blockquote><br></div>but your kernel seems to be not entirely fully installed?<br>You can try running "depmod -a" and see if that fixes things.<br><font color="#888888"><br>
Paul<br></font></blockquote></div><br></div></div></div>
</blockquote></div><br></div>