[Openswan Users] Openswan-2.4.5dr3

[Giovani Moda - MR Informática]

Some more bad news:

Compiled kernel-2.6.13-1.1532_FC4 with NAT-T patch. Builded openswan 
userland and klips module without a error. But when trying to load openswan, 
I got:

Dec 13 17:22:22 inet kernel: klips_info:ipsec_init: KLIPS startup, Openswan 
KLIP
S IPsec stack version: 2.4.5dr3
Dec 13 17:22:22 inet kernel: NET: Registered protocol family 15
Dec 13 17:22:22 inet kernel: klips_info:ipsec_alg_init: KLIPS alg v=0.8.1-0 
(EAL
G_MAX=255, AALG_MAX=251)
Dec 13 17:22:22 inet kernel: klips_info:ipsec_alg_init: calling 
ipsec_alg_static
_init()
Dec 13 17:22:22 inet kernel: ipsec_aes_init(alg_type=15 alg_id=12 name=aes): 
ret
=0
Dec 13 17:22:22 inet kernel: ipsec_3des_init(alg_type=15 alg_id=3 
name=3des): re
t=0
Dec 13 17:22:22 inet ipsec_setup: KLIPS debug `none'
Dec 13 17:22:22 inet kernel: ------------[ cut here ]------------
Dec 13 17:22:22 inet kernel: kernel BUG at include/linux/module.h:360!
Dec 13 17:22:22 inet kernel: invalid operand: 0000 [#1]
Dec 13 17:22:22 inet kernel: Modules linked in: ipsec(U) parport_pc lp 
parport a
utofs4 nfs lockd nfs_acl rfcomm l2cap bluetooth sunrpc ipv6 ipt_REDIRECT 
ipt_MAS
QUERADE ipt_LOG ipt_TOS ipt_tos iptable_mangle ip_nat_ftp iptable_nat 
iptable_fi
lter ipt_multiport ipt_state ipt_limit ipt_conntrack ip_conntrack_ftp 
ip_conntra
ck ip_tables dm_mod uhci_hcd ehci_hcd snd_via82xx_modem shpchp i2c_viapro 
i2c_co
re snd_via82xx gameport snd_ac97_codec snd_seq_dummy snd_seq_oss 
snd_seq_midi_ev
ent snd_seq snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd_page_alloc 
snd_mpu40
1_uart snd_rawmidi snd_seq_device snd soundcore via_rhine mii floppy ext3 
jbd
Dec 13 17:22:22 inet kernel: CPU:    0
Dec 13 17:22:22 inet kernel: EIP:    0060:[<c03796f6>]    Not tainted VLI
Dec 13 17:22:22 inet kernel: EFLAGS: 00010246   (2.6.13-1.1532_FC4_natt)
Dec 13 17:22:22 inet kernel: EIP is at sk_alloc+0x150/0x15d
Dec 13 17:22:22 inet kernel: eax: 00000000   ebx: f904ed80   ecx: 000000d0 
edx
: f904cd80
Dec 13 17:22:22 inet kernel: esi: f7b19800   edi: f7b199a4   ebp: 00000000 
esp
: efaccefc
Dec 13 17:22:22 inet kernel: ds: 007b   es: 007b   ss: 0068
Dec 13 17:22:22 inet kernel: Process klipsdebug (pid: 3892, 
threadinfo=efacc000
task=ef71baa0)
Dec 13 17:22:22 inet kernel: Stack: f904cd80 0000000f 00000000 f2a634c0 
efacc000
 00000003 f9008371 00000001
Dec 13 17:22:22 inet kernel:        00030002 00000010 00000010 f7ff3e00 
f904cea0
 f2a634c0 0000000f 00000000
Dec 13 17:22:22 inet kernel:        c0376fb5 00000000 ef71baa0 00000002 
efaccf74
 efaccf98 0805006c efacc000
Dec 13 17:22:22 inet ipsec_setup: KLIPS ipsec0 on eth0 
192.168.1.4/255.255.255.0
 broadcast 192.168.1.255
Dec 13 17:22:22 inet kernel: Call Trace:
Dec 13 17:22:22 inet kernel:  [<f9008371>] pfkey_create+0x6b/0x20c [ipsec]
Dec 13 17:22:22 inet kernel:  [<c0376fb5>] __sock_create+0xab/0x1e2
Dec 13 17:22:22 inet kernel:  [<c0377104>] sock_create+0x18/0x1d
Dec 13 17:22:22 inet kernel:  [<c0377142>] sys_socket+0x1c/0x44
Dec 13 17:22:22 inet kernel:  [<c0377f78>] sys_socketcall+0x86/0x292
Dec 13 17:22:22 inet ipsec_setup: ...Openswan IPsec started
Dec 13 17:22:22 inet kernel:  [<c0109b35>] do_syscall_trace+0xef/0x123
Dec 13 17:22:22 inet ipsec_setup: Starting Openswan IPsec 2.4.5dr3...
Dec 13 17:22:22 inet kernel:  [<c0104449>] syscall_call+0x7/0xb
Dec 13 17:22:23 inet ipsec_setup: /usr/lib/ipsec/_startklips: line 330: 
3892 Se
gmentation fault      ipsec klipsdebug --none
Dec 13 17:22:23 inet kernel: Code: 18 89 50 1c e9 02 ff ff ff 8b 14 24 8b 42 
6c
89 da e8 f0 ca df ff 89 c6 e9 e2 fe ff ff 89 f0 e8 e5 cb df ff 31 f6 e9 17 
ff ff
 ff <0f> 0b 68 01 e7 70 41 c0 e9 04 ff ff ff 56 53 83 ec 0c 89 c3 8b
Dec 13 17:22:23 inet ipsec_setup: /usr/lib/ipsec/_startklips: line 393: 
3903 Se
gmentation fault      ipsec eroute --clear

And pluto crashes. Could not get a core file for debugging. I guess that's 
bacause the problem is KLIPS, not pluto. AFAIK, KLIPS seems to work fine 
when staticly in this kernel, but not as a module. I'll test it later.

Giovani