[Openswan dev] KLIPS broken in 2.6.25?

Ruben Laban r.laban at ism.nl
Fri Apr 2 12:15:22 EDT 2010

On Friday 02 April 2010 at 17:34 (CET), Harald Jenny wrote:
> can it be that a change in userspace between 2.6.24 and 2.6.25 broke KLIPS,
> at least when built as module for kernel 2.6.26 and 2.6.30 the following
> happens to me:
> transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
> STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
> pfkey_lib_debug:pfkey_msg_parse: satype 4 conversion to proto failed for
> msg_type 14 (x-addflow(eroute)). pfkey_lib_debug:pfkey_msg_build: Trouble
> parsing newly built pfkey message, error=-22. pfkey_msg_build of flow
> tun.1001 at failed, code -22
> Problem is present when running KLIPS 2.6.24 or 2.6.25 with userspace
> 2.6.25 and vanishes when grading back to 2.6.24 - can please anybody
> confirm if this is a real problem or am I chasing down a ghost?

I experience the same.

Just now i tested against a 2.6.33 kernel: still no go.
Kernels I tried before include: 2.6.24+ubuntu patches, 2.6.27+ubuntu patches, 
vanilla, vanilla, and probably much but those didn't leave 
any traces on my test boxes.


Ruben Laban
Senior Systems and Network Administrator
ISM eCompany

More information about the Dev mailing list