[Openswan dev] KLIPS broken in 2.6.25?

[Ruben Laban]

On Friday 02 April 2010 at 17:34 (CET), Harald Jenny wrote:
> can it be that a change in userspace between 2.6.24 and 2.6.25 broke KLIPS,
> at least when built as module for kernel 2.6.26 and 2.6.30 the following
> happens to me:
>
> transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
> STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
> pfkey_lib_debug:pfkey_msg_parse: satype 4 conversion to proto failed for
> msg_type 14 (x-addflow(eroute)). pfkey_lib_debug:pfkey_msg_build: Trouble
> parsing newly built pfkey message, error=-22. pfkey_msg_build of flow
> tun.1001 at 62.178.14.33 failed, code -22
>
> Problem is present when running KLIPS 2.6.24 or 2.6.25 with userspace
> 2.6.25 and vanishes when grading back to 2.6.24 - can please anybody
> confirm if this is a real problem or am I chasing down a ghost?

I experience the same.

Just now i tested against a 2.6.33 kernel: still no go.
Kernels I tried before include: 2.6.24+ubuntu patches, 2.6.27+ubuntu patches, 
vanilla 2.6.28.10, vanilla 2.6.32.2, and probably much but those didn't leave 
any traces on my test boxes.

-- 
Regards,

Ruben Laban
Senior Systems and Network Administrator
ISM eCompany