[Openswan Users] seg.fault in pluto / CentOS5.x RPMs

[Adam Tauno Williams]

On Wed, 8 July 2009 Paul Wouters wrote:
>> On Tue, 7 Jul 2009, Adam Tauno Williams wrote:
>> I have a VPN server on CentOS5.3 running the CentOS supplied
>> openswan-2.6.14-1.el5_3.3.  But when trying to setup a new connection
>> I'm getting a Seg. Fault in pluto.  Doing some research I've found a
>> couple other reports of something similar followed by the advice to
>> update to openswan 2.6.21 (or later).  But I can't find an
>> openswan-2.6.21/22  *anywhere*.
>> The FC11 src.rpm won't build on CentOS5 and attempting to 'rpmbuild -ta'
>> the tar.gz fails at the check-files step with an exit code of 100 and
>> *no* error message.
> Try this:
> cd /usr/src/redhat/SOURCES
> wget ftp://ftp.openswan.org/openswan/openswan-2.6.22.tar.gz
> tar zxf openswan-2.6.22.tar.gz
> rpmbuild -ba openswan-2.6.22/packaging/fedora/openswan.spec

Indeed!  This does create an installable RPM.  But pluto continuously
dies once the ipsec service is started.

...
Jul  8 14:30:40 localhost kernel: NET: Registered protocol family 15
Jul  8 14:30:40 localhost ipsec_setup: Restarting Openswan IPsec U2.6.22/K2.6.18-128.1.16.el5...
Jul  8 14:30:40 localhost ipsec_setup: Using NETKEY(XFRM) stack
Jul  8 14:30:40 localhost kernel: padlock: VIA PadLock not detected.
Jul  8 14:30:40 localhost kernel: padlock: VIA PadLock not detected.
Jul  8 14:30:41 localhost ipsec_setup: ...Openswan IPsec started
Jul  8 14:30:41 localhost pluto: adjusting ipsec.d to /etc/ipsec.d
Jul  8 14:30:41 localhost ipsec__plutorun: adjusting ipsec.d to /etc/ipsec.d
Jul  8 14:30:43 localhost ipsec__plutorun: whack: read() failed (104 Connection reset by peer)
Jul  8 14:30:43 localhost ipsec__plutorun: whack: Pluto is not running (no "/var/run/pluto/pluto.ctl")
Jul  8 14:30:43 localhost ipsec__plutorun: !pluto failure!:  exited with error status 1
Jul  8 14:30:43 localhost ipsec__plutorun: restarting IPsec after pause...
Jul  8 14:30:53 localhost ipsec_setup: Stopping Openswan IPsec...
Jul  8 14:30:54 localhost kernel: NET: Unregistered protocol family 15
Jul  8 14:30:54 localhost ipsec_setup: ...Openswan IPsec stopped
Jul  8 14:30:54 localhost kernel: NET: Registered protocol family 15
Jul  8 14:30:54 localhost ipsec_setup: Using NETKEY(XFRM) stack
...