[Openswan Users] Openswan-3.0.6. runtime requirements

KokHow.Teh at infineon.com KokHow.Teh at infineon.com
Tue Nov 6 00:41:08 EST 2007


Hi;
	I have the following error messages which are related to
permission. Appreciate if anyone could point me to the files of which
the permission should be changed to 0600.

Jan  1 00:01:00 Danube daemon.err ipsec_setup:
/usr/local/libexec/ipsec/eroute: Trouble opening PF_KEY family socket
with error: access denied.  Check
 permissions.  Should be 600.
Jan  1 00:01:00 Danube daemon.err ipsec_setup: + ipsec spi --clear
Jan  1 00:01:00 Danube daemon.err ipsec_setup:
/usr/local/libexec/ipsec/spi: Trouble opening PF_KEY family socket with
error: access denied.  Check pe
rmissions.  Should be 600.

Regards,
KH

-----Original Message-----
From: Paul Wouters [mailto:paul at xelerance.com] 
Sent: Wednesday, October 31, 2007 2:07 AM
To: Teh Kok How (IFAP DC COM WL SD)
Cc: users at openswan.org
Subject: Re: [Openswan Users] Openswan-3.0.6. runtime requirements

On Tue, 30 Oct 2007, KokHow.Teh at infineon.com wrote:

> Hi;
> 	I am using 3.0.6 from
> ftp://ftp.openswan.org/openswan/development/openswan-3.0.06.tgz on my 
> embedded system. Since it is an embedded system running rootfs on 
> flash, it has memory constraints that fail the runtime requirements of
> openswan-3.0.6 which needs certain modules and perl which I am not 
> sure could be done away with to use openswan to test my hardware 
> crypto. Here are the error messages that I get when I run
/etc/init.d/ispec start:

You do not need perl. Only 'ipsec verify', a diagnostic tool, requires
perl.

> ipsec_setup: /usr/local/sbin/ipsec: exec: line 136:
> /usr/local/libexec/ipsec/calcgoo: not found

You can ignore the calcgoo references, those should be completely
removed.
It was used for figuring out the proper ipsec kernel module to load for
a specific arch before useful packaging of kernels happened.

> ipsec_setup: modprobe: module hw_random not found

That's okay, you have no HWRNG.

> ipsec_setup: modprobe: failed to load module padlock

And you have no padlock, that's fine too.

Paul


More information about the Users mailing list