[Openswan Users] Migrating to OpenSwan (problems)

[Paul Wouters]

On Fri, 2 Apr 2004, Mike Diehl (Encrypted email preferred) wrote:

> I'm in the process of migrating a (working) FreeSwan connection to OpenSwan.  
> I've uninstalled FS and installed OS on one side.  The other side still have 
> FS.
> 
> When I bring up the connection, the FS side seems to work.  The OS side gives 
> me some error messages.  The ONLY thing that was changed is the version of 
> Swan.
> 
> Here is the error message:
> ------------------------------------------------------------------------------
> dominion root # /etc/init.d/ipsec restart
> ipsec_setup: Stopping Openswan IPsec...
> ipsec_setup: /usr/libexec/ipsec/eroute: pfkey write failed, returning -1 with 
> errno=22.
> ipsec_setup: Invalid argument, check kernel log messages for specifics.
> ipsec_setup: Starting Openswan IPsec U2.1.1/Ksuper-freeswan-1.99.8...
> ipsec_setup: klipsdebug=`all' ignored, KLIPS lacks debug facilities
> ipsec_setup: /usr/libexec/ipsec/eroute: pfkey write failed, returning -1 with 
> errno=22.
> ipsec_setup: Invalid argument, check kernel log messages for specifics.
> ------------------------------------------------------------------------------
> 
> The barf is at: http://www.diehlnet.com/barf.txt

Linux FreeS/WAN U2.1.1/Ksuper-freeswan-1.99.8 (klips)

You cannot mix the openswan-2 userland with a super-freeswan kernel module.
You will also need to install and use the openswan-2 kernel module. If
you did compile it, you might still have the old ipsec.o loaded.

Paul