[Openswan Users] ASSERTION FAILED Request for Help

David Klann dxklann at gmail.com
Fri Mar 7 15:58:40 EST 2008 

On Fri, 7 Mar 2008 12:26:32 -0500 (EST)
Paul Wouters <paul at xelerance.com> wrote:

> On Fri, 7 Mar 2008, David Klann wrote:
> 
> > ASSERTION FAILED at kernel_alg.c:264: buflen>0
> 
> This seems to be a kernel issue. Can you try 2.6.22 instead? We have
> not had the time to even look at 2.6.23 properly yet.

Hi Paul,

Thanks for your quick reply!

I built and ran gentoo kernel 2.6.22-r10 (2.6.22.12). No
difference. Then I build and ran 2.6.21-r4 (2.6.21.4). Again, the same
behavior (ASSERTION FAILED). Gentoo has a separate kernel header
package. I made sure to install "linux-headers-2.6.22-r2" and
re-compiled openswan-2.4.12. Again, no change in the behavior of
pluto. I'm still seeing the ASSERTION FAILED message. I enabled full
debugging in ipsec.conf to see if more information would be
helpful. See below for the details (from a test while running
2.6.21-gentoo-r4).

Any thoughts?

Thanks much!

 -David Klann

Mar  7 14:48:39 host ipsec__plutorun: Restarting Pluto subsystem...
Mar  7 14:48:39 host pluto[7825]: Starting Pluto (Openswan Version 2.4.12 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR; Vendor ID OEKBzdY{wM]@)
Mar  7 14:48:39 host pluto[7825]: Setting NAT-Traversal port-4500 floating to on
Mar  7 14:48:39 host pluto[7825]:    port floating activation criteria nat_t=1/port_fload=1
Mar  7 14:48:39 host pluto[7825]:   including NAT-Traversal patch (Version 0.6c)
Mar  7 14:48:39 host pluto[7825]: | opening /dev/urandom
Mar  7 14:48:39 host pluto[7825]: | inserting event EVENT_REINIT_SECRET, timeout in 3600 seconds
Mar  7 14:48:39 host pluto[7825]: | inserting event EVENT_PENDING_PHASE2, timeout in 120 seconds
Mar  7 14:48:39 host pluto[7825]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
Mar  7 14:48:39 host pluto[7825]: no helpers will be started, all cryptographic operations will be done inline
Mar  7 14:48:39 host pluto[7825]: | process 7825 listening for PF_KEY_V2 on file descriptor 6
Mar  7 14:48:39 host pluto[7825]: Using NETKEY IPsec interface code on 2.6.21-gentoo-r4
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_hdr_build: 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0p0xbfbf6120 pfkey_ext=0p0xbfbf7140 *pfkey_ext=0p(nil). 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0p0xbfbf6120 pfkey_ext=0p0xbfbf7140 *pfkey_ext=0p0x80fe3d8. 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_build: pfkey_msg=0p0x80fe3f0 allocated 16 bytes, &(extensions[0])=0p0xbfbf7140 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_build: extensions permitted=00000001, seen=00000001, required=00000001. 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=2(AH), len=2, res=0, seq=1, pid=7825. 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_parse: remain=0 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, required=00000001. 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. 
Mar  7 14:48:39 host pluto[7825]: | finish_pfkey_msg: SADB_REGISTER message 1 for AH 
Mar  7 14:48:39 host pluto[7825]: |   02 07 00 02  02 00 00 00  01 00 00 00  91 1e 00 00
Mar  7 14:48:39 host pluto[7825]: | pfkey_get: SADB_REGISTER message 1
Mar  7 14:48:39 host pluto[7825]: | AH registered with kernel.
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_hdr_build: 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0p0xbfbf6120 pfkey_ext=0p0xbfbf7140 *pfkey_ext=0p(nil). 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0p0xbfbf6120 pfkey_ext=0p0xbfbf7140 *pfkey_ext=0p0x80fe3d8. 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_build: pfkey_msg=0p0x80fe3f0 allocated 16 bytes, &(extensions[0])=0p0xbfbf7140 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_build: extensions permitted=00000001, seen=00000001, required=00000001. 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=3(ESP), len=2, res=0, seq=2, pid=7825. 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_parse: remain=0 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, required=00000001. 
Mar  7 14:48:39 host pluto[7825]: | pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. 
Mar  7 14:48:39 host pluto[7825]: | finish_pfkey_msg: SADB_REGISTER message 2 for ESP 
Mar  7 14:48:39 host pluto[7825]: |   02 07 00 03  02 00 00 00  02 00 00 00  91 1e 00 00
Mar  7 14:48:39 host pluto[7825]: | pfkey_get: SADB_REGISTER message 2
Mar  7 14:48:39 host pluto[7825]: | alg_init():memset(0x80fa980, 0, 2016) memset(0x80fb160, 0, 2048) 
Mar  7 14:48:39 host pluto[7825]: ASSERTION FAILED at kernel_alg.c:264: buflen>0
Mar  7 14:48:39 host pluto[7825]: %myid = (none)
Mar  7 14:48:39 host pluto[7825]: debug raw+crypt+parsing+emitting+control+lifecycle+klips+dns+oppo+controlmore+pfkey+nattraversal+x509
Mar  7 14:48:39 host pluto[7825]:  
Mar  7 14:48:39 host pluto[7825]:  
Mar  7 14:48:39 host pluto[7825]: algorithm IKE encrypt: id=5, name=OAKLEY_3DES_CBC, blocksize=8, keydeflen=192
Mar  7 14:48:39 host pluto[7825]: algorithm IKE encrypt: id=7, name=OAKLEY_AES_CBC, blocksize=16, keydeflen=128
Mar  7 14:48:39 host pluto[7825]: algorithm IKE hash: id=1, name=OAKLEY_MD5, hashsize=16
Mar  7 14:48:39 host pluto[7825]: algorithm IKE hash: id=2, name=OAKLEY_SHA1, hashsize=20
Mar  7 14:48:39 host pluto[7825]: algorithm IKE dh group: id=2, name=OAKLEY_GROUP_MODP1024, bits=1024
Mar  7 14:48:39 host pluto[7825]: algorithm IKE dh group: id=5, name=OAKLEY_GROUP_MODP1536, bits=1536
Mar  7 14:48:39 host pluto[7825]: algorithm IKE dh group: id=14, name=OAKLEY_GROUP_MODP2048, bits=2048
Mar  7 14:48:39 host pluto[7825]: algorithm IKE dh group: id=15, name=OAKLEY_GROUP_MODP3072, bits=3072
Mar  7 14:48:39 host pluto[7825]: algorithm IKE dh group: id=16, name=OAKLEY_GROUP_MODP4096, bits=4096
Mar  7 14:48:39 host pluto[7825]: algorithm IKE dh group: id=17, name=OAKLEY_GROUP_MODP6144, bits=6144
Mar  7 14:48:39 host pluto[7825]: algorithm IKE dh group: id=18, name=OAKLEY_GROUP_MODP8192, bits=8192
Mar  7 14:48:39 host pluto[7825]:  
Mar  7 14:48:39 host pluto[7825]: stats db_ops.c: {curr_cnt, total_cnt, maxsz} :context={0,0,0} trans={0,0,0} attrs={0,0,0} 
Mar  7 14:48:39 host pluto[7825]:  

List of loaded modules:

Module                  Size  Used by
sha1                    2304  0 
sha256                 11008  0 
xfrm4_mode_tunnel       2432  0 
twofish_i586            5504  0 
twofish_common         34816  1 twofish_i586
blowfish                8192  0 
aes_i586               32500  0 
des                    16128  0 
esp4                    5504  0 
ah4                     4736  0 
ipcomp                  5128  0

More information about the Users mailing list