[Openswan dev] commit e526a0647cce87abd31b0b9955a2f19e76279cef

[Ruben Laban]

On Tuesday 11 January 2011 at 03:03 (CET), Paul Wouters wrote:
> commit e526a0647cce87abd31b0b9955a2f19e76279cef
> Author: Paul Wouters <paul at xelerance.com>
> Date:   Mon Jan 10 20:56:19 2011 -0500
> 
>     OCF: Set the OCF queues to 10000 when 256MB+ RAM and 1000+ bogomips

This leads to the following on a system without OCF support:

ipsec_setup: Starting Openswan IPsec 2.6.master-201102.git...
ipsec_setup: /usr/lib/ipsec/_startklips: 324: limit: not found
ipsec_setup: /usr/lib/ipsec/_startklips: 335: cannot create /sys/module/ocf/paramaters/crypto_q_max: Directory nonexistent
ipsec_setup: /usr/lib/ipsec/_startklips: 336: cannot create /sys/module/ocf/paramaters/ipsec_irs_cache_allocated_max: Directory nonexistent
ipsec_setup: /usr/lib/ipsec/_startklips: 337: cannot create /sys/module/ocf/paramaters/ipsec_ixs_cache_allocated_max: Directory nonexistent
ipsec_setup: No KLIPS support found while requested, desperately falling back to netkey
ipsec_setup: NETKEY support found. Use protostack=netkey in /etc/ipsec.conf to avoid attempts to use KLIPS. Attempting to continue with NETKEY

I guess a proper fix would be to check for the presence of /sys/module/ocf/ first?

Regards,
Ruben Laban