[Openswan Users] compiling Openswan

[Marcus Carlson]

Hi,

You've ended up with two ipsec stacks. Before you load the klips stack 
you have to remove the standard netkey stack from the kernel.

 From a previous message by Paul, run the following;

rmmod esp4 ah4 af_key xfrm_user
modprobe ipsec

Marcus


Viktor pajtás wrote:
> 
> Hello Openswans :)
> 
> we are trying to relace OpenVPN (unusable) with Openswan.
> only trying because we cannot compile it on Debian Etch i686.
> 
> apt-get install module-assistant
> m-a prepare
> m-a a-i openswan
> lefordul, települ az ipsec modul.
> 
> so far it is okay, but kernel oops with these deb-s:
> 
> ii openswan 2.4.6+dfsg.2-1.1 IPSEC utilities for Openswan
> 
> ii openswan-modules-2.6.18-6-686
> 2.4.6+dfsg.2-1.1+2.6.18.dfsg.1-18snapshot.10197 IPSEC kernel modules for
> Openswan
> 
> ii linux-image-2.6.18-6-686 2.6.18.dfsg.1-18snapshot.10197 Linux 2.6.18
> image on PPro/Celeron/PII/PIII
> 
> the oops happens after `modprobe ipsec` after the plutorun pause is over:
> 
> Feb 12 12:54:21 vpn1 ipsec__plutorun: restarting IPsec after pause...
> Feb 12 12:54:24 vpn1 kernel: klips_info:ipsec_init: KLIPS startup,
> Openswan KLIPS IPsec stack version: 2.4.6
> Feb 12 12:54:24 vpn1 kernel: NET: Registered protocol family 15
> Feb 12 12:54:24 vpn1 kernel: klips_info:ipsec_alg_init: KLIPS alg
> v=0.8.1-0 (EALG_MAX=255, AALG_MAX=251)
> Feb 12 12:54:24 vpn1 kernel: klips_info:ipsec_alg_init: calling
> ipsec_alg_static_init()
> Feb 12 12:54:24 vpn1 kernel: ipsec_aes_init(alg_type=15 alg_id=12
> name=aes): ret=0
> Feb 12 12:54:24 vpn1 kernel: klips_debug: experimental ipsec_alg_AES_MAC
> not registered [Ok] (auth_id=0)
> Feb 12 12:54:24 vpn1 kernel: ipsec_3des_init(alg_type=15 alg_id=3
> name=3des): ret=0
> 
> Oops: 0000 [#1]
> SMP
> Modules linked in: ipv6 button ac battery tunnel4 ipcomp esp4 ah4
> deflate zlib_deflate twofish serpent aes blowfish des sha256 sha1
> crypto_null af_key dm_snapshot dm_mirror dm_mod loop floppy parport_pc
> parport rtc psmouse serio_raw intel_agp agpgart pcspkr i2c_piix4
> i2c_core shpchp pci_hotplug tsdev joydev evdev ext3 jbd mbcache sd_mod
> pcnet32 mii mptspi mptscsih mptbase scsi_transport_spi scsi_mod piix
> generic ide_core thermal processor fan
> CPU: 0
> EIP: 0060:[] Not tainted VLI
> EFLAGS: 00010286 (2.6.18-6-686 #1)
> EIP is at proc_get_inode+0x4a/0x12e
> eax: cccc0000 ebx: f00002eb ecx: cc893cc0 edx: d0b074e0
> esi: cc893cc0 edi: cfa8b400 ebp: cf7679ec esp: cccc1d28
> ds: 007b es: 007b ss: 0068
> Process ipsec (pid: 2933, ti=cccc0000 task=cfecc550 task.ti=cccc0000)
> Stack: cc893cc0 cce25324 ffffffea c01868e4 c02cf0c0 cce25324 cf767974
> c01653c4
> cccc1d9c cccc1d90 cccc1f0c cfa89140 57b32ee9 cf767974 cd349766 cccc1f0c
> c0166f93 cd34976d 00000001 00000000 00000001 00000000 cfa89f40 00000246
> Call Trace:
> [] proc_lookup+0x92/0xa6
> [] do_lookup+0xa3/0x135
> [] __link_path_walk+0x865/0xd1d
> [] link_path_walk+0x49/0xbd
> [] __handle_mm_fault+0x408/0x740
> [] __do_softirq+0x5a/0xbb
> [] __link_path_walk+0xafc/0xd1d
> [] link_path_walk+0x49/0xbd
> [] __handle_mm_fault+0x408/0x740
> [] __do_softirq+0x5a/0xbb
> [] do_path_lookup+0x20a/0x225
> [] __user_walk_fd+0x29/0x3f
> [] vfs_stat_fd+0x15/0x3c
> [] __handle_mm_fault+0x408/0x740
> [] __do_softirq+0x5a/0xbb
> [] sys_stat64+0xf/0x23
> [] do_page_fault+0x18a/0x481
> [] do_page_fault+0x0/0x481
> [] sysenter_past_esp+0x56/0x79
> Code: 00 00 68 3d b5 29 c0 68 99 3c 29 c0 e8 50 9e f9 ff e8 f3 06 f8 ff
> 83 c4 10 85 f6 74 26 8b 56 2c 85 d2 74 1f 89 e0 25 00 e0 ff ff <83> 3a
> 02 8b 40 10 0f 84 bc 00 00 00 c1 e0 05 8d 84 10 20 01 00
> EIP: [] proc_get_inode+0x4a/0x12e SS:ESP 0068:cccc1d28
> 
> the Debian is a fresh install
> 2.6.24 kernel comes from /ec/apt/sources.list:
> deb http://kernel-archive.buildserver.net/debian-kernel etch main
> but we have the same situation with the etch kernel (2.6.18)
> 
> Your help is appreciated.
> 
> Viktor at Budapest
> 
> _______________________________________________
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> Building and Integrating Virtual Private Networks with Openswan: 
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155