[Openswan dev] problems with USE_LIBNSS

[Tuomo Soini]

I tried to test openswan-2.6.24rc5 compiled with nss support. I couldn't
get it working and after some investigation I found out this by stracing
 pluto:

stat("sql:/etc/ipsec.d/cert8.db", 0x7fffe95e04c0) = -1 ENOENT (No such
file or directory)

and

open("sql:/etc/ipsec.d/cert8.db", O_RDWR) = -1 ENOENT (No such file or
directory)

On log I see this:

Dec 29 20:56:34 usik pluto[21767]: nss directory plutomain: sql:/etc/ipsec.d
Dec 29 20:56:34 usik pluto[21767]: NSS initialization failed (err -8174)

I'm not first one to find out NSS support doesn't work on
openswan-2.6.24rc series but I did dig deeper and found a difference
from openswan-2.6.21 nss patch used in rhel5 and nss patch which got
included into openswan git tree.

openswan-2.6.21-nss.patch has this change for plutomain.c

+       snprintf(buf, sizeof(buf), "%s",oco->confddir);

and git tree has:

+	snprintf(buf, sizeof(buf), "sql:%s",oco->confddir);

I'm quite sure removing this sql: from code will fix it but can you
confirm this? Doesn't fedora version of openswan have this same problem?

-- 
Tuomo Soini <tis at foobar.fi>
Foobar Linux services
+358 40 5240030
Foobar Oy <http://foobar.fi/>