[Openswan Users] CentOS 5.3 and klips

[Paul Wouters]

On Sat, 29 Aug 2009, Maverick wrote:

> # /etc/init.d/ipsec start
> /usr/libexec/ipsec/addconn Non-fips mode set in
> /proc/sys/crypto/fips_enabled
> ipsec_setup: Starting Openswan IPsec 2.6.22...
> ipsec_setup: /usr/libexec/ipsec/_startklips: line 138: 22010 Segmentation
> fault      ipsec tncfg --attach --virtual $virt --physical $phys
> ipsec_setup: SIOCSIFFLAGS: No such device
> ipsec_setup: /usr/libexec/ipsec/addconn Non-fips mode set in
> /proc/sys/crypto/fips_enabled

wow. tuncfg segfaults?
Add dumpdir=/var/run/pluto/ to config setup and make it crash, then run
gdb to see what's up?

Another wild guess, is selinux enabled? Anything in dmesg?

what does ipsec --version say? did klips actually load?

Paul

>
> Any idea?
>
> -----Original Message-----
> From: Paul Wouters [mailto:paul at xelerance.com]
> Sent: quarta-feira, 26 de Agosto de 2009 21:46
> To: Maverick
> Cc: users at openswan.org
> Subject: Re: [Openswan Users] CentOS 5.3 and klips
>
> On Wed, 26 Aug 2009, Maverick wrote:
>
>> Then I tried with openswan-2.6.22 and I get this:
>>
>>  CC [M]  /root/openswan-2.6.22/modobj26/ipsec_xmit.o
>> /root/openswan-2.6.22/modobj26/ipsec_xmit.c: In function
> 'ipsec_xmit_send':
>> /root/openswan-2.6.22/modobj26/ipsec_xmit.c:2071: error:
> 'NF_INET_LOCAL_OUT'
>> undeclared (first use in this function)
>
> Change it to NF_IP_LOCAL_OUT.
>
> Paul
>
> _______________________________________________
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> Building and Integrating Virtual Private Networks with Openswan:
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
>