[Openswan Users] Openswan compression
Rolsma, Dan B
dbrolsm at sandia.gov
Sat Aug 28 18:44:36 CEST 2004
When I use compression I get this error:
# ipsec auto --up alice-albuquerque
003 "alice-albuquerque" #3: ERROR: netlink_get_spi for
comp.0 at xxx.xxx.xxx.xxx failed with errno 22: Invalid argument
I'm running Openswan 2.1.4 and RedHat WS3 Update2. It comes with kernel
2.4.21-15.Elsmp. I also compiled a kernel booting off of it, but with the
same results.
My config file
# /etc/ipsec.conf - FreeS/WAN IPsec configuration file
version 2.0
conn alice-albuquerque
left=xxx.xxx.xxx.xxx
leftsubnet=xxx.xxx.xxx.xxx/29
leftid=@xxxxx.lala.org
leftrsasigkey=0sA...
leftnexthop=%defaultroute
right=xxx.xxx.xxx.xxx
rightsubnet=xxx.xxx.xxx.xxx/32 # alice
rightid=@yyyyyy.lala.org
rightrsasigkey=sAQO+...
rightnexthop=%defaultroute
compress=yes
auto=add
#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf
If I delete the line with "compress=yes", or make it "compress=no", the link
works.
Dan.
More information about the Users
mailing list