[Openswan dev] commit e526a0647cce87abd31b0b9955a2f19e76279cef

[Simon Deziel]

On 01/11/2011 10:36 AM, Ruben Laban wrote:
> On Tuesday 11 January 2011 at 03:03 (CET), Paul Wouters wrote:
>> commit e526a0647cce87abd31b0b9955a2f19e76279cef
>> Author: Paul Wouters <paul at xelerance.com>
>> Date:   Mon Jan 10 20:56:19 2011 -0500
>>
>>     OCF: Set the OCF queues to 10000 when 256MB+ RAM and 1000+ bogomips
> 
> This leads to the following on a system without OCF support:
> 
> ipsec_setup: Starting Openswan IPsec 2.6.master-201102.git...
> ipsec_setup: /usr/lib/ipsec/_startklips: 324: limit: not found
> ipsec_setup: /usr/lib/ipsec/_startklips: 335: cannot create /sys/module/ocf/paramaters/crypto_q_max: Directory nonexistent
> ipsec_setup: /usr/lib/ipsec/_startklips: 336: cannot create /sys/module/ocf/paramaters/ipsec_irs_cache_allocated_max: Directory nonexistent
> ipsec_setup: /usr/lib/ipsec/_startklips: 337: cannot create /sys/module/ocf/paramaters/ipsec_ixs_cache_allocated_max: Directory nonexistent
> ipsec_setup: No KLIPS support found while requested, desperately falling back to netkey
> ipsec_setup: NETKEY support found. Use protostack=netkey in /etc/ipsec.conf to avoid attempts to use KLIPS. Attempting to continue with NETKEY
> 
> I guess a proper fix would be to check for the presence of /sys/module/ocf/ first?

This was addressed by a82b7fb033f940c47fbda596c7d0d2a938ab6857. Thanks
for reporting.

Simon