[Openswan Users] Problem with openswan RPM and FC4

[Paul Wouters]

On Thu, 26 Jan 2006, Nils Höres wrote:

> kernel-2.6.13-1.1532_FC4.i686.rpm
> kernel-devel-2.6.13-1.1532_FC4.i686.rpm
> openswan-klips-2.4.4-2.6.13_1.1532_FC4_1.i386.rpm
>
> And whenever I start /etc/init.d/ipsec I get the following :
> klips_info:ipsec_init: KLIPS startup, Openswan KLIPS IPsec stack version: 2.4.4
> NET: Registered protocol family 15
> klips_info:ipsec_alg_init: KLIPS alg v=0.8.1-0 (EALG_MAX=255, AALG_MAX=251)
> klips_info:ipsec_alg_init: calling ipsec_alg_static_init()
> ipsec_aes_init(alg_type=15 alg_id=12 name=aes): ret=0
> klips_debug: experimental ipsec_alg_AES_MAC not registered [Ok] (auth_id=0)
> ipsec_3des_init(alg_type=15 alg_id=3 name=3des): ret=0
> ------------[ cut here ]------------
> kernel BUG at include/linux/module.h:360!
> invalid operand: 0000 [#1]
> Modules linked in: ipsec(U) ipv6 autofs4 dm_mod video button battery ac shpchp i2c_piix4 i2c_core pcnet32 mii floppy ext3 jbd BusLogic sd_mod scsi_mod
> CPU:    0
> EIP:    0060:[<c037b746>]    Not tainted VLI
> EFLAGS: 00010246   (2.6.13-1.1532_FC4)
> EIP is at sk_alloc+0x150/0x15d

There are some unsolved problems with modern fedora kernels.

> Are there any Kernel-OpenSwan combinations that run with KLIPS and Nat-t support out of the box ?

Try a stock linux kernel, instead of a fedora one.

Paul