[Openswan Users] Error 22: PFKey Write Failed... Urgent

love_myself love_myself at indiatimes.com
Mon Apr 25 12:21:57 CEST 2005


Hi friends,
Sorry for asking a trivial question to all of you.. but i am really stuck.

Please reply if you have any idea.
I tried to search on the Mailing archieves, and got that this could be a version problem, but still I am not sure how to solve it.
Please help

I got into this problem, while trying to Eshtablish SA in openswan.
PS: I am installing on Red-Hat Linux-9.0,
                                        Kernel 2.4.20-30.9.

I ran:--

ipsec spi --af inet --edst 10.232.40.40 --spi 0x123 \
--proto esp --esp 3des-md5-96 \
--authkey 0s+aadddeeeefffff2 --enckey 0s+aadddeeeefffff2 

And Got this, after switching Debug option ON:-- 


 ipsec spi --debug `cat /home/in1064c/spidata`
/usr/local/libexec/ipsec/spi: edst=10.232.40.40.
/usr/local/libexec/ipsec/spi: Algorithm 10 selected.
/usr/local/libexec/ipsec/spi: All options processed.
/usr/local/libexec/ipsec/spi: SA valid.
/usr/local/libexec/ipsec/spi: Algorithm ok.
pfkey_lib_debug:pfkey_msg_hdr_build:
pfkey_lib_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0p0xbfffd390 pfkey_ext=0p0xbfffe4f0 *pfkey_ext=0p(nil).
pfkey_lib_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0p0xbfffd390 pfkey_ext=0p0xbfffe4f0 *pfkey_ext=0p0x8064790.
pfkey_lib_debug:pfkey_sa_build: spi=00000123 replay=0 sa_state=1 auth=2 encrypt=3 flags=0
/usr/local/libexec/ipsec/spi: extensions[0]=0p0x8064790 previously set with msg_hdr.
/usr/local/libexec/ipsec/spi: assembled SA extension, pfkey msg authalg=2 encalg=3.
/usr/local/libexec/ipsec/spi: i=0, j=0, life_opt[0][0]=0p(nil), life[0][0]=0
/usr/local/libexec/ipsec/spi: i=0, j=1, life_opt[0][1]=0p(nil), life[0][1]=0
/usr/local/libexec/ipsec/spi: i=0, j=2, life_opt[0][2]=0p(nil), life[0][2]=0
/usr/local/libexec/ipsec/spi: i=0, j=3, life_opt[0][3]=0p(nil), life[0][3]=0
/usr/local/libexec/ipsec/spi: i=0, j=4, life_opt[0][4]=0p(nil), life[0][4]=0
/usr/local/libexec/ipsec/spi: i=1, j=0, life_opt[1][0]=0p(nil), life[1][0]=0
/usr/local/libexec/ipsec/spi: i=1, j=1, life_opt[1][1]=0p(nil), life[1][1]=0
/usr/local/libexec/ipsec/spi: i=1, j=2, life_opt[1][2]=0p(nil), life[1][2]=0
/usr/local/libexec/ipsec/spi: i=1, j=3, life_opt[1][3]=0p(nil), life[1][3]=0
/usr/local/libexec/ipsec/spi: i=1, j=4, life_opt[1][4]=0p(nil), life[1][4]=0
/usr/local/libexec/ipsec/spi: assembling address_s extension (0.0.0.0).
pfkey_lib_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0
pfkey_lib_debug:pfkey_address_build: found address family AF_INET.
pfkey_lib_debug:pfkey_address_build: found address=0.0.0.0:0.
pfkey_lib_debug:pfkey_address_build: successful created len: 3.
pfkey_lib_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0
pfkey_lib_debug:pfkey_address_build: found address family AF_INET.
pfkey_lib_debug:pfkey_address_build: found address=10.232.40.40:0.
pfkey_lib_debug:pfkey_address_build: successful created len: 3.
pfkey_lib_debug:pfkey_key_build:
/usr/local/libexec/ipsec/spi: key_a extension assembled.
pfkey_lib_debug:pfkey_key_build:
/usr/local/libexec/ipsec/spi: key_e extension assembled.
/usr/local/libexec/ipsec/spi: assembling pfkey msg....
pfkey_lib_debug:pfkey_msg_build: pfkey_msg=0p0x8064848 allocated 136 bytes, &(extensions[0])=0p0xbfffe4f0
pfkey_lib_debug:pfkey_msg_build: copying 24 bytes from extensions[1] (type=1)
pfkey_lib_debug:pfkey_msg_build: copying 24 bytes from extensions[5] (type=5)
pfkey_lib_debug:pfkey_msg_build: copying 24 bytes from extensions[6] (type=6)
pfkey_lib_debug:pfkey_msg_build: copying 24 bytes from extensions[8] (type=8)
pfkey_lib_debug:pfkey_msg_build: copying 24 bytes from extensions[9] (type=9)
pfkey_lib_debug:pfkey_msg_build: extensions permitted=78001ffb, seen=00000363, required=00000063.
pfkey_lib_debug:pfkey_msg_parse: parsing message ver=2, type=3(add), errno=0, satype=3(ESP), len=17, res=0, seq=1, pid=14040.
pfkey_lib_debug:pfkey_msg_parse: satype 3(ESP) conversion to proto gives 50 for msg_type 3(add).
pfkey_lib_debug:pfkey_msg_parse: remain=15
pfkey_lib_debug:pfkey_msg_parse: extensions permitted=78001ffb, required=00000063.
pfkey_lib_debug:pfkey_msg_parse: parsing ext type=1(security-association) remain=15.
pfkey_lib_debug:pfkey_msg_parse: remain=15 ext_type=1(security-association) ext_len=3 parsing ext 0p0x8064858 with parser pfkey_sa_parse.
pfkey_lib_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00000123 replay=0 state=1 auth=2 encrypt=3 flags=0 ref=-1.
pfkey_lib_debug:pfkey_msg_parse: Extension 1(security-association) parsed.
pfkey_lib_debug:pfkey_msg_parse: parsing ext type=5(source-address) remain=12.
pfkey_lib_debug:pfkey_msg_parse: remain=12 ext_type=5(source-address) ext_len=3 parsing ext 0p0x8064870 with parser pfkey_address_parse.
pfkey_lib_debug:pfkey_address_parse: found exttype=5(source-address) family=2(AF_INET) address=0.0.0.0 proto=0 port=0.
pfkey_lib_debug:pfkey_address_parse: successful.
pfkey_lib_debug:pfkey_msg_parse: Extension 5(source-address) parsed.
pfkey_lib_debug:pfkey_msg_parse: parsing ext type=6(destination-address) remain=9.
pfkey_lib_debug:pfkey_msg_parse: remain=9 ext_type=6(destination-address) ext_len=3 parsing ext 0p0x8064888 with parser pfkey_address_parse.
pfkey_lib_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=10.232.40.40 proto=0 port=0.
pfkey_lib_debug:pfkey_address_parse: successful.
pfkey_lib_debug:pfkey_msg_parse: Extension 6(destination-address) parsed.
pfkey_lib_debug:pfkey_msg_parse: parsing ext type=8(authentication-key) remain=6.
pfkey_lib_debug:pfkey_msg_parse: remain=6 ext_type=8(authentication-key) ext_len=3 parsing ext 0p0x80648a0 with parser pfkey_key_parse.
pfkey_lib_debug:pfkey_key_parse: success, found len=3 exttype=8(authentication-key) bits=96 reserved=0.
pfkey_lib_debug:pfkey_msg_parse: Extension 8(authentication-key) parsed.
pfkey_lib_debug:pfkey_msg_parse: parsing ext type=9(cipher-key) remain=3.
pfkey_lib_debug:pfkey_msg_parse: remain=3 ext_type=9(cipher-key) ext_len=3 parsing ext 0p0x80648b8 with parser pfkey_key_parse.
pfkey_lib_debug:pfkey_key_parse: success, found len=3 exttype=9(cipher-key) bits=96 reserved=0.
pfkey_lib_debug:pfkey_msg_parse: Extension 9(cipher-key) parsed.
pfkey_lib_debug:pfkey_msg_parse: extensions permitted=78001ffb, seen=00000363, required=00000063.
/usr/local/libexec/ipsec/spi: assembled.
/usr/local/libexec/ipsec/spi: writing pfkey msg.
/usr/local/libexec/ipsec/spi: pfkey write failed (errno=22): Invalid argument, check kernel log messages for specifics.

Thanks in advance.Indiatimes Email now powered by APIC Advantage. Help! 
Help

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20050425/3b7cb3be/attachment-0001.htm


More information about the Users mailing list