[Openswan Users] Klips patch

[Paul Wouters]

On Mon, 24 Oct 2005, sasa wrote:

> [root at test redhat]# service ipsec start
> ipsec_setup: Starting Openswan IPsec 2.4.0...
> ipsec_setup: insmod /lib/modules/2.6.11-1.35_FC3/kernel/net/key/af_key.ko
> ipsec_setup: insmod /lib/modules/2.6.11-1.35_FC3/kernel/net/ipv4/ah4.ko
> ipsec_setup: insmod /lib/modules/2.6.11-1.35_FC3/kernel/net/ipv4/esp4.ko
> ipsec_setup: insmod /lib/modules/2.6.11-1.35_FC3/kernel/net/ipv4/ipcomp.ko
> ipsec_setup: insmod /lib/modules/2.6.11-1.35_FC3/kernel/net/ipv4/xfrm4_tunnel.ko
> ipsec_setup: insmod /lib/modules/2.6.11-1.35_FC3/kernel/crypto/des.ko
> ipsec_setup: insmod /lib/modules/2.6.11-1.35_FC3/kernel/arch/i386/crypto/aes-i586.ko
>
> [root at test redhat]# locate ipsec.ko
> /usr/src/redhat/BUILD/openswan-2.4.0/BUILD.i386/.ipsec.ko.cmd
> /usr/src/redhat/BUILD/openswan-2.4.0/BUILD.i386/ipsec.ko
> /usr/src/redhat/BUILD/openswan-2.4.0/BUILD.i386-smp/.ipsec.ko.cmd
> /usr/src/redhat/BUILD/openswan-2.4.0/BUILD.i386-smp/ipsec.ko
> /lib/modules/2.6.11-1.35_FC3smp/kernel/net/ipsec/ipsec.ko
> /lib/modules/2.6.11-1.35_FC3/kernel/net/ipsec/ipsec.ko

If you are indeed running 2.6.11-1.35_FC3, you should 'modprobe ipsec' BEFORE starting
openswan. Use 'lsmod' to see if the module loaded. If the module did not load, something
is wrong on your build or your machine or your compile environment.

> ..on my test-machine I have a i686 architecture pherpas is this the problem ?

No that should not be a problem.

> > As I have told you now a few times, you need to ensure that the NETKEY modules
> > are not loaded and that the KLIPS module is loaded before starting openswan,
> > otherwise it will favour loading the NETKEY modules.
> >
> > rmmod af_key
> > rmmod esp4
> > rmmod ipcomp
> > modprobe ipsec
>
> ..I have always:
> #modprobe ipsec
> #FATAL: Module ipsec not found

It seems your module did not get installed properly. What does 'depmod -a' say?

Paul
-- 

"Happiness is never grand"

	--- Mustapha Mond, World Controller (Brave New World)