[Openswan Users] CentOS 5.3 and klips

[Maverick]

Fedora 11 (64 bit)

2.6.29.6-217.2.16.fc11.x86_64 #1 SMP Mon Aug 24 17:17:40 EDT 2009 x86_64
x86_64 x86_64 GNU/Linux

# ipsec --version
Linux Openswan 2.6.22 (klips)
See `ipsec --copyright' for copyright information.

Klips loaded :

# lsmod | grep ipsec
ipsec                 350340  0

SELinux disabled:

# getenforce 
Disabled

dmesg in attachment.


-----Original Message-----
From: Paul Wouters [mailto:paul at xelerance.com] 
Sent: sábado, 29 de Agosto de 2009 4:24
To: Maverick
Cc: users at openswan.org
Subject: Re: [Openswan Users] CentOS 5.3 and klips

On Sat, 29 Aug 2009, Maverick wrote:

> # /etc/init.d/ipsec start
> /usr/libexec/ipsec/addconn Non-fips mode set in
> /proc/sys/crypto/fips_enabled
> ipsec_setup: Starting Openswan IPsec 2.6.22...
> ipsec_setup: /usr/libexec/ipsec/_startklips: line 138: 22010 Segmentation
> fault      ipsec tncfg --attach --virtual $virt --physical $phys
> ipsec_setup: SIOCSIFFLAGS: No such device
> ipsec_setup: /usr/libexec/ipsec/addconn Non-fips mode set in
> /proc/sys/crypto/fips_enabled

wow. tuncfg segfaults?
Add dumpdir=/var/run/pluto/ to config setup and make it crash, then run
gdb to see what's up?

Another wild guess, is selinux enabled? Anything in dmesg?

what does ipsec --version say? did klips actually load?

Paul

>
> Any idea?
>
> -----Original Message-----
> From: Paul Wouters [mailto:paul at xelerance.com]
> Sent: quarta-feira, 26 de Agosto de 2009 21:46
> To: Maverick
> Cc: users at openswan.org
> Subject: Re: [Openswan Users] CentOS 5.3 and klips
>
> On Wed, 26 Aug 2009, Maverick wrote:
>
>> Then I tried with openswan-2.6.22 and I get this:
>>
>>  CC [M]  /root/openswan-2.6.22/modobj26/ipsec_xmit.o
>> /root/openswan-2.6.22/modobj26/ipsec_xmit.c: In function
> 'ipsec_xmit_send':
>> /root/openswan-2.6.22/modobj26/ipsec_xmit.c:2071: error:
> 'NF_INET_LOCAL_OUT'
>> undeclared (first use in this function)
>
> Change it to NF_IP_LOCAL_OUT.
>
> Paul
>
> _______________________________________________
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> Building and Integrating Virtual Private Networks with Openswan:
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dmesg.txt.gz
Type: application/octet-stream
Size: 6810 bytes
Desc: not available
Url : http://lists.openswan.org/pipermail/users/attachments/20090829/530a59cc/attachment.obj