[Openswan Users] Starting ipsec locks machine

Paul Wouters paul at xelerance.com
Fri Mar 24 02:06:30 CET 2006

On Thu, 23 Mar 2006, Rod Savard wrote:

> I was a long-time user of FreeS/WAN 2.06 on 2.4 kernels.
> I'm now attempting to get Openswan working in KLIPS mode on a 2.6 kernel
> on Debian Sarge.

> At this point openswan is using default config files.  If I try to start
> ipsec like this I get a hard lock:
> # /etc/init.d/ipsec start
> I have to reboot my machine at this point (and disable the ipsec script
> in single user mode because it will try to start automatically each time
> I boot).

You are likely hitting our SMP bug. Are you running this on a P4 machine?

Disable hyperthreading, or just run (and compile against) a UP kernel.

This bug is the reason 2.4.5 has not yet been released. We hope to have
this fixed ASAP.

Building and integrating Virtual Private Networks with Openswan:

More information about the Users mailing list