[Openswan Users] - Building module saga (was: kernel panic )

[mario.lobo at ipad.com.br]

Michael told me to:

>   "ulimit -c unlimited" before you start IPsec.

I did it but still, nothing is being dumpped :( .

I noticed the line from messages:

__plutorun: /usr/lib/ipsec/_plutorun: line 221:  5107 Segmentation fault      /usr/libexec/i
psec/pluto --nofork --secretsfile /etc/ipsec.secrets --ipsecdir /etc/ipsec.d --debug-none --
uniqueids.

OBS - note that the option dumpdir=/tmp is Not in the command line

On my setup I have the following:

/etc/ipsec.secrets (1 line)

	include /etc/spyket/conf/vpn/SECRETSControl

/etc/spyket/conf/vpn/SECRETSControl (1 line also)

	include /etc/spyket/conf/vpn/secrets/*.secrets

then, on /etc/spyket/conf/vpn/secrets, I finally have 

centro.secrets, which is:

@centro-left @ponta1-right : rsa {
# RSA 512 bits   Spyket   Fri Feb 18 10:43:50 2005
        # for signatures only, UNSAFE FOR ENCRYPTION
        
#pubkey=0sAQOsTHiyCIvJvGC/TVQyOGz/cSO6sX1vTne6kQglYruWrXKQguTmsyRGfJlUCBt18f+9YF896+mupfQHNRtcQxf5
        Modulus: 
0xac4c78b2088bc9bc60bf4d5432386cff7123bab17d6f4e77ba91082562bb96ad729082e4e6b324467c9954081b75f1ffbd
605f3debe9aea5f407351b5c4317f9
        PublicExponent: 0x03
        # everything after this point is secret
        PrivateExponent: 
0x072dda5cc05b2867d95d4de38217af354f617d1cba8f4defa7c60b018ec7d0f1d3039e00821d346202fac485cecf487dd5
943a75c7d39f4b7bf2caa8a3ec49db
        Prime1: 0xf9495ba3940b424513d34ea98c1f6eecbc59f2c65f70ad5a9a60766cc7d06a51
        Prime2: 0xb0f057351feaf8d1214398d32be7b746fb20f16cd0a21237bae3bedf364bc129
        Exponent1: 0xa630e7c262b22c2e0d3789c65d6a49f3283bf72eea4b1e3c66eaf99dda8af18b
        Exponent2: 0x75f58f78bff1fb36162d108cc7efcf84a76b4b9de06c0c2527427f3f7987d61b
        Coefficient: 0xb217fa7b9abb4fc57caf46ca3c9008add6439276b3c85a81ddf8d411f59f713d }


Could those sucessions of includes be the cause of Pluto´s seg fault?
Should I give the whole thing up and attempt native ipsec?

thanks once more,
-- 
   //|  //||
  // | // ||
-//--//---|| ARIO LOBO
//  //    ||
---------------------------------
mario.lobo at ipad.com.br
http://www.ipad.com.br


On 10 Mar 2005 at 15:08, Paul Wouters wrote:

> On Thu, 10 Mar 2005 mario.lobo at ipad.com.br wrote:
> 
> > Date: Thu, 10 Mar 2005 10:16:48 -0300
> > From: mario.lobo at ipad.com.br
> > Cc: Michael Richardson <mcr at xelerance.com>
> > To: Paul Wouters <paul at xelerance.com>
> > Subject: Re: [Openswan Users] - Building module saga (was: kernel panic )
> > 
> > I added dumpdir=/tmp to config setup of both machines but 
> > nothing is being dumpped :( .
> > 
> > I restarted ipsec several times but there is always nothing in /tmp.
> > 
> > Should I add klipsdebug=all /plutodebug=all ?
> 
> No.
> Either it should log more, or it should core dump. There are no other options
> 
> I am not sure what is going wrong,
> 
> Paul
>