[Openswan Users] Wedgies

[Paul Wouters]

On Wed, 2 Mar 2005, Marcus Leech wrote:

Thanks for doing more testing Marcus. It is kind of strange. KLIPS works fine
on my x86_64 (apart from unloading). I hope we can trace the kernel issues
soon.

Paul

> Well, after repeatedly being told that KLIPS problems in 2.6 were likely due 
> to
> RedHat/Fedora  kernels, I installed 2.6.11-rc5 (from kernel.org) yesterday, 
> and testing
> today reveals that as soon as you try to pass traffic, it hangs the system, 
> requiring a hard reset--just
> like with the RedHat/Fedora 2.6.10 kernels.
>
> Furthermore, any attempt to negotiate AES with KLIPS *still* causes a null 
> pointer deref
> in the kernel, in AES_setkey.
>
> I'm going to build 2.6.11 (just released a few hours ago), and see if that 
> makes any
> difference, but I really doubt it.  It's just not looking good for KLIPS on 
> 2.6 at
> this point.