[Openswan Users] Openswan compression

Rolsma, Dan B dbrolsm at sandia.gov
Sat Aug 28 18:44:36 CEST 2004


When I use compression I get this error:

# ipsec auto --up alice-albuquerque
003 "alice-albuquerque" #3: ERROR: netlink_get_spi for
comp.0 at xxx.xxx.xxx.xxx failed with errno 22: Invalid argument

I'm running Openswan 2.1.4 and RedHat WS3 Update2.  It comes with kernel
2.4.21-15.Elsmp.  I also compiled a kernel booting off of it, but with the
same results.

My config file

	# /etc/ipsec.conf - FreeS/WAN IPsec configuration file
	version 2.0
	conn alice-albuquerque
	        left=xxx.xxx.xxx.xxx
	        leftsubnet=xxx.xxx.xxx.xxx/29
	        leftid=@xxxxx.lala.org
	        leftrsasigkey=0sA...
	        leftnexthop=%defaultroute
	        right=xxx.xxx.xxx.xxx
	        rightsubnet=xxx.xxx.xxx.xxx/32   # alice
	        rightid=@yyyyyy.lala.org
	        rightrsasigkey=sAQO+...
	        rightnexthop=%defaultroute
	        compress=yes
	        auto=add
	 
	#Disable Opportunistic Encryption
	include /etc/ipsec.d/examples/no_oe.conf

If I delete the line with "compress=yes", or make it "compress=no", the link
works.

Dan.



More information about the Users mailing list