[Openswan Users] problem with KLIPS patch for linux 2.6.18

[Paul Wouters]

On Fri, 27 Jun 2008, Sambuddho Chakravarty wrote:

> Next I compiled the kernel with this klipskernelpatch.diff. While
> compilation I turned the PF_KEY to <M>, IPSEC_AH to <M> and IPSEC_ESP
> <M>  and Openswan KLIPS to <*> leaving the rest of the stuff as it is.
> 
> Compilation succeeds and I reboot to the new kernel. I try to do a 
> /etc/init.d/ipsec start. It shows the following error
> 
> ipsec_setup: Starting Openswan IPsec 2.6.14...
> ipsec_setup: NO NETKEY support found
> ipsec_setup: kernel appears to lack IPsec support (neither CONFIG_KLIPS
> or CONFIG_NET_KEY are set)
> 
> However I am sure the kernel is successfully compiled with KLIPS as when
> I do ipsec --version it show :
> 
> Linux Openswan 2.6.14 (klips)

Does your /etc/ipsec.conf contain protostack=netkey ?

Or if it contains no protostack= option, can you add it and set it to klips
to see if that solved your problem?

Paul