[Openswan dev] KLIPS broken in 2.6.25?

Harald Jenny harald at a-little-linux-box.at
Fri Apr 2 16:23:08 EDT 2010


Ruben I suspect you use Ubuntu, I use Debian - can anybody with Fedora confirm the problem also exists there?

On Fri, Apr 02, 2010 at 06:15:22PM +0200, Ruben Laban wrote:
> On Friday 02 April 2010 at 17:34 (CET), Harald Jenny wrote:
> > can it be that a change in userspace between 2.6.24 and 2.6.25 broke KLIPS,
> > at least when built as module for kernel 2.6.26 and 2.6.30 the following
> > happens to me:
> >
> > transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
> > STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
> > pfkey_lib_debug:pfkey_msg_parse: satype 4 conversion to proto failed for
> > msg_type 14 (x-addflow(eroute)). pfkey_lib_debug:pfkey_msg_build: Trouble
> > parsing newly built pfkey message, error=-22. pfkey_msg_build of flow
> > tun.1001 at 62.178.14.33 failed, code -22
> >
> > Problem is present when running KLIPS 2.6.24 or 2.6.25 with userspace
> > 2.6.25 and vanishes when grading back to 2.6.24 - can please anybody
> > confirm if this is a real problem or am I chasing down a ghost?
> 
> I experience the same.
> 
> Just now i tested against a 2.6.33 kernel: still no go.
> Kernels I tried before include: 2.6.24+ubuntu patches, 2.6.27+ubuntu patches, 
> vanilla 2.6.28.10, vanilla 2.6.32.2, and probably much but those didn't leave 
> any traces on my test boxes.
> 
> -- 
> Regards,
> 
> Ruben Laban
> Senior Systems and Network Administrator
> ISM eCompany
> _______________________________________________
> Dev mailing list
> Dev at openswan.org
> http://lists.openswan.org/mailman/listinfo/dev


More information about the Dev mailing list