[Openswan Users] Klips patch

[sasa]

"Paul Wouters" wrote:
> As I have told you now a few times, you need to ensure that the NETKEY modules
> are not loaded and that the KLIPS module is loaded before starting openswan,
> otherwise it will favour loading the NETKEY modules.

..I have made a test also with kernel 2.6.11-1.35 and also with this kernel version the result isn't change.
About the modules i have the following situation:

[root at test redhat]# service ipsec start
ipsec_setup: Starting Openswan IPsec 2.4.0...
ipsec_setup: insmod /lib/modules/2.6.11-1.35_FC3/kernel/net/key/af_key.ko
ipsec_setup: insmod /lib/modules/2.6.11-1.35_FC3/kernel/net/ipv4/ah4.ko
ipsec_setup: insmod /lib/modules/2.6.11-1.35_FC3/kernel/net/ipv4/esp4.ko
ipsec_setup: insmod /lib/modules/2.6.11-1.35_FC3/kernel/net/ipv4/ipcomp.ko
ipsec_setup: insmod /lib/modules/2.6.11-1.35_FC3/kernel/net/ipv4/xfrm4_tunnel.ko
ipsec_setup: insmod /lib/modules/2.6.11-1.35_FC3/kernel/crypto/des.ko
ipsec_setup: insmod /lib/modules/2.6.11-1.35_FC3/kernel/arch/i386/crypto/aes-i586.ko

[root at test redhat]# locate ipsec.ko
/usr/src/redhat/BUILD/openswan-2.4.0/BUILD.i386/.ipsec.ko.cmd
/usr/src/redhat/BUILD/openswan-2.4.0/BUILD.i386/ipsec.ko
/usr/src/redhat/BUILD/openswan-2.4.0/BUILD.i386-smp/.ipsec.ko.cmd
/usr/src/redhat/BUILD/openswan-2.4.0/BUILD.i386-smp/ipsec.ko
/lib/modules/2.6.11-1.35_FC3smp/kernel/net/ipsec/ipsec.ko
/lib/modules/2.6.11-1.35_FC3/kernel/net/ipsec/ipsec.ko

..on my test-machine I have a i686 architecture pherpas is this the problem ?

> As I have told you now a few times, you need to ensure that the NETKEY modules
> are not loaded and that the KLIPS module is loaded before starting openswan,
> otherwise it will favour loading the NETKEY modules.
> 
> rmmod af_key
> rmmod esp4
> rmmod ipcomp
> modprobe ipsec

..I have always:
#modprobe ipsec
#FATAL: Module ipsec not found

still thanks.

        Salvatore.