[Openswan Users] Which Free or OpenSWAN on Debian testing (2.6.3 kernel)?

[Ken Bantoft]

On Sun, 2 May 2004, Joost Kraaijeveld wrote:

> Hi Ken,
> 
> Ken Bantoft schreef:
> > Um... which README is this?  Openswan 2.x supports Kernels
> > 2.4 *and* 2.6.
> The README from OpenSWAN 2.1.2 rc3, line 94.
> 
> > Our README explicitly states so, and gives installation
> > instructions for both kernels.
> Following the instructions, I did not get a working tunnel (which, thanks to Paul Wouters, worked with the same configuration files on a modified RedHat 8.0).
> 
> I get the follwing errors:
> 
> Directly after installation (with an empty configuration file):
> 
> May  2 15:25:33 linuxbuiten ipsec_setup: Starting Openswan IPsec 2.1.2rc3...
> May  2 15:25:33 linuxbuiten ipsec_setup: insmod: can't read 'ipsec': No such file or directory
> May  2 15:25:34 linuxbuiten ipsec_setup: insmod /lib/modules/2.6.3-1-686/kernel/net/key/af_key.ko
> May  2 15:25:34 linuxbuiten ipsec_setup: insmod /lib/modules/2.6.3-1-686/kernel/net/ipv4/ah4.ko
> May  2 15:25:34 linuxbuiten ipsec_setup: insmod /lib/modules/2.6.3-1-686/kernel/net/ipv4/esp4.ko
> May  2 15:25:34 linuxbuiten ipsec_setup: insmod /lib/modules/2.6.3-1-686/kernel/net/ipv4/ipcomp.ko
> May  2 15:25:34 linuxbuiten ipsec_setup: insmod /lib/modules/2.6.3-1-686/kernel/net/xfrm/xfrm_user.ko

Klips doesn't run on 2.6.x... so KLIPS shouldn't be present at all. (hence 
the 'ipsec' no such file or directory.

> May  2 15:25:34 linuxbuiten ipsec_setup: KLIPS ipsec0 on eth0 213.46.144.131/255.255.255.0 broadcast 213.46.144.255
> 
> And with an operational configuration file:
> 
> May  2 18:26:02 linuxbuiten ipsec_setup: Starting Openswan IPsec U2.1.2rc3/K2.6.3-1-686...
> May  2 18:26:02 linuxbuiten ipsec_setup: KLIPS ipsec0 on eth0 213.46.144.131/255.255.255.0 broadcast 213.46.144.255
> May  2 18:26:04 linuxbuiten ipsec_setup: ...Openswan IPsec started

It seems to be confused.  Did you upgrade the kernel from 2.4 series to 
2.6 series on this box?

-- 
Ken Bantoft			VP Business Development
ken at xelerance.com		Xelerance Corporation
sip://toronto.xelerance.com	http://www.xelerance.com

The future is here. It's just not evenly distributed yet. 
        -- William Gibson