[Openswan Users] Problem with _plutorun script

[desantis at csr.unibo.it]

This is my syslog:

Jun 18 12:32:43 gewbecca ipsec_setup: ...Openswan IPsec started
Jun 18 12:32:44 gewbecca ipsec__plutorun: ipsec_auto: fatal error in
"packetdefault": %defaultroute requested but not known
Jun 18 12:32:44 gewbecca ipsec__plutorun: ipsec_auto: fatal error in "wintwork":
ID "%any" cannot have RSA key
Jun 18 12:32:44 gewbecca ipsec__plutorun: /usr/local/lib/ipsec/_plutorun: line
1:  7080 Floating point exception(core dumped) /usr/local/libexec/ipsec/pluto
--nofork --secretsfile /etc/ipsec.secrets --ipsecdir /etc/ipsec.d --debug-none
--uniqueids --nat_traversal --virtual_private
%v4:192.168.0.0/24,%v4:10.0.0.0/24
Jun 18 12:32:44 gewbecca ipsec__plutorun: whack: is Pluto running?  connect()
for "/var/run/pluto.ctl" failed (111 Connection refused)
Jun 18 12:32:44 gewbecca ipsec__plutorun: ...could not route conn
"packetdefault"
Jun 18 12:32:44 gewbecca ipsec__plutorun: !pluto failure!:  exited with error
status 136 (signal 8)
Jun 18 12:32:44 gewbecca ipsec__plutorun: restarting IPsec after pause...
Jun 18 12:32:55 gewbecca ipsec_setup: Stopping Openswan IPsec...
Jun 18 12:32:55 gewbecca ipsec_setup: Removing orphaned /var/run/pluto.pid:
Jun 18 12:32:55 gewbecca kernel: IPSEC EVENT: KLIPS device ipsec0 shut down.
Jun 18 12:32:55 gewbecca kernel:
Jun 18 12:32:55 gewbecca kernel:
Jun 18 12:32:55 gewbecca kernel: klips_info:pfkey_cleanup: shutting down PF_KEY
domain sockets.
Jun 18 12:32:55 gewbecca kernel: klips_info:cleanup_module: ipsec module
unloaded.
Jun 18 12:32:55 gewbecca ipsec_setup: ...Openswan IPsec stopped
Jun 18 12:32:43 gewbecca ipsec_setup: ...Openswan IPsec started


> > 
> > > I istalled on my gateway openswan-2.1.2 and i have a problem with
> > > "ipsec_plutorun" script.
> 
> 
> > It looks like your pluto is crashing. Enable dumpdir=/tmp and rerun it to
> > crash
> > pluto. Then use gdb pointing to both the source and the core file in /tmp
> and
> > give
> > us a backtrace from gdb to investigate this problem.
> > If possisble, please describe your system and kernel specifics as well.
> > 
> > 2.1.2 should have been fixed for the crl.pem crasher AFAIK, but perhaps
> you
> > want
> > to try removing the pem files in /etc/ipsec.d/crls/
> > 
> > Paul