[Openswan Users] Openswan-3.0.6. runtime requirements
KokHow.Teh at infineon.com
KokHow.Teh at infineon.com
Tue Nov 6 00:41:08 EST 2007
Hi;
I have the following error messages which are related to
permission. Appreciate if anyone could point me to the files of which
the permission should be changed to 0600.
Jan 1 00:01:00 Danube daemon.err ipsec_setup:
/usr/local/libexec/ipsec/eroute: Trouble opening PF_KEY family socket
with error: access denied. Check
permissions. Should be 600.
Jan 1 00:01:00 Danube daemon.err ipsec_setup: + ipsec spi --clear
Jan 1 00:01:00 Danube daemon.err ipsec_setup:
/usr/local/libexec/ipsec/spi: Trouble opening PF_KEY family socket with
error: access denied. Check pe
rmissions. Should be 600.
Regards,
KH
-----Original Message-----
From: Paul Wouters [mailto:paul at xelerance.com]
Sent: Wednesday, October 31, 2007 2:07 AM
To: Teh Kok How (IFAP DC COM WL SD)
Cc: users at openswan.org
Subject: Re: [Openswan Users] Openswan-3.0.6. runtime requirements
On Tue, 30 Oct 2007, KokHow.Teh at infineon.com wrote:
> Hi;
> I am using 3.0.6 from
> ftp://ftp.openswan.org/openswan/development/openswan-3.0.06.tgz on my
> embedded system. Since it is an embedded system running rootfs on
> flash, it has memory constraints that fail the runtime requirements of
> openswan-3.0.6 which needs certain modules and perl which I am not
> sure could be done away with to use openswan to test my hardware
> crypto. Here are the error messages that I get when I run
/etc/init.d/ispec start:
You do not need perl. Only 'ipsec verify', a diagnostic tool, requires
perl.
> ipsec_setup: /usr/local/sbin/ipsec: exec: line 136:
> /usr/local/libexec/ipsec/calcgoo: not found
You can ignore the calcgoo references, those should be completely
removed.
It was used for figuring out the proper ipsec kernel module to load for
a specific arch before useful packaging of kernels happened.
> ipsec_setup: modprobe: module hw_random not found
That's okay, you have no HWRNG.
> ipsec_setup: modprobe: failed to load module padlock
And you have no padlock, that's fine too.
Paul
More information about the Users
mailing list