[Openswan Users] Using 1DES :(

Rajkumar S rajkumars at asianetindia.com
Fri Sep 2 22:18:42 CEST 2005


Paul Wouters wrote:
>> 003 "sample": requested kernel enc ealg_id=2 not present
>> 034 "sample": can not initiate: no acceptable kernel algorithms loaded
> 
> 
> Does you Debian kernel not have cryptoapi support for 1DES? I guess they
> backported the NETKEY code? Or if you use KLIPS, disable the cryptoapi
> klips option and use klips' own DES routines that include 1DES.

I am usig klips, and a custom compiled 2.4.21 kernel. Where can I 
disable cryptoapi klips option?

>> Sep  2 17:02:35 localhost ipsec_setup: Starting Openswan IPsec 
>> 2.4.0rc4...
>> Sep  2 17:02:46 localhost ipsec__plutorun: 
>> /usr/local/lib/ipsec/_plutorun: line
>> 1:  4784 Segmentation fault      /usr/local/libexec/ipsec/pluto --nofork
> 
> 
> Can you add dumpdir=/tmp to config setup, crash pluto again and run gdb
> on the core file in /tmp ? This might be a new crasher we have not seen
> before.

I will and let you know tomorrow. (i am in India and it's night here 
right now)

raj


More information about the Users mailing list