[Openswan Users] klips ocf_2.6.18 head

Antonello Lombardinilo antonello at kasko.it
Thu Jan 11 07:40:20 EST 2007

Hi all, 

I'am newbie openswan user.
I have Hinf 7956HXL PCIU acceleration board and I'am trying to
test it with openswan and ocf.
I readed some messages in mailing lists and understand that
Kplis project is vanilla kernel + openswan patch installed
(is it correct ?).
I downloaded from git repository a klips ocf_2.6.18 head.
My distribution is fedora Core 5 with last yum updates.
I proceeded as following:
1) cd ~/kernel-2.6.18-ocf_openswan (from git repository)
2) cp /boot/config-2.6.18-1.2257.fc5 .config
3) make oldconfig
4) make manuconfig [changes some things, see follow]
5) make bzImage
6) make modules
7) make modules_install
8) make install 

At step 6) I see the following warning message:
 CC      net/ipsec/ipsec_ocf.o
net/ipsec/ipsec_ocf.c: In function 'ipsec_ocf_xmit_cb':
net/ipsec/ipsec_ocf.c:814: warning: implicit declaration of function 
 Building modules, stage 2.
WARNING: drivers/atm/he.o - Section mismatch: reference to .init.text: from 
.text between 'he_start' (at offset 0x202a) and 'he_service_tbrq'
WARNING: "crypto_get_sess_devicename" [crypto/ocf/cryptodev.ko] undefined!
WARNING: "crypto_find_driverid" [crypto/ocf/cryptodev.ko] undefined!
WARNING: "sys_dup" [crypto/ocf/cryptodev.ko] undefined!
 CC      crypto/ocf/cryptodev.mod.o
 LD [M]  crypto/ocf/cryptodev.ko
 CC      crypto/ocf/ocf-bench.mod.o
 LD [M]  crypto/ocf/ocf-bench.ko
 CC      crypto/ocf/random.mod.o
 LD [M]  crypto/ocf/random.ko 

At step 7) I see the following warning message:
if [ -r System.map -a -x /sbin/depmod ]; then /sbin/depmod -ae -F System.map 
2.6.18-ocf_openswan; fi
WARNING: /lib/modules/2.6.18-ocf_openswan/kernel/net/ipsec/ipsec.ko needs 
unknown symbol crypto_get_sess_devicename
WARNING: /lib/modules/2.6.18-ocf_openswan/kernel/crypto/ocf/cryptodev.ko 
needs unknown symbol crypto_get_sess_devicename
WARNING: /lib/modules/2.6.18-ocf_openswan/kernel/crypto/ocf/cryptodev.ko 
needs unknown symbol sys_dup
WARNING: /lib/modules/2.6.18-ocf_openswan/kernel/crypto/ocf/cryptodev.ko 
needs unknown symbol crypto_find_driverid 

Now, when reboot the system with new compiled kernel an try:
#modprobe ipsec
FATAL: Error inserting ipsec 
(/lib/modules/2.6.18-ocf_openswan/kernel/net/ipsec/ipsec.ko): Unknown symbol 
in module, or unknown parameter (see dmesg) 

dmesg reports that:
 ipsec: Unknown symbol crypto_get_sess_devicename 

I see that crypto_get_sess_devicename symbol is present in System.map:
 #cat /boot/System.map-2.6.18-ocf_openswan | grep crypto_get_sess_devicename
 c01bc8d0 T crypto_get_sess_devicename 

I added to the end of the file crypto/ocf/crypto.c:

and at the step 6) I see the following warning message:
WARNING: /lib/modules/2.6.18-ocf_openswan/kernel/crypto/ocf/cryptodev.ko 
needs unknown symbol sys_dup 

Now, when I try:
#modprobe ipsec 

dmesg reports that:
 klips_info:ipsec_alg_init: KLIPS alg v=0.8.1-0 (EALG_MAX=255, AALG_MAX=251)
 klips_info:ipsec_alg_init: calling ipsec_alg_static_init()
 ipsec_aes_init(alg_type=15 alg_id=12 name=aes): ret=0
 ipsec_aes_init(alg_type=14 alg_id=9 name=aes_mac): ret=0
 ipsec_3des_init(alg_type=15 alg_id=3 name=3des): ret=0
 cryptodev: module license 'BSD' taints kernel. 

but the problem on cryptodev module remains and I don't now how to fix it
(Hardware problem? My harware is AMD Athlon 64!).
Have anyone any idea ?
Have anyone tried how to use Hinf 7956HXL PCIU acceleration board with 
openswan ? 

How I proceed to configure Hifn board and run simple test? 


More information about the Users mailing list