[Openswan Users] KLIPS crashes on kernel 2.6.25>

[Giovani Moda]

> Could you post a short message on what you did to switch to cryptoapi
for
> other users on the list?

Sure, I'll create a new thread with instructions. 

> rekeying is a userland thing, it will not be different for KLIPS or
NETKEY.

Well, all I know is that it's working:

ipsec0    Link encap:Ethernet  HWaddr 08:00:27:82:fb:e1
          inet addr:192.168.1.61  Mask:255.255.255.0
          inet6 addr: fe80::a00:27ff:fe82:fbe1/64 Scope:Link
          UP RUNNING NOARP  MTU:16260  Metric:1
          RX packets:1199412 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2269516 errors:0 dropped:9 overruns:0 carrier:0
          collisions:0 txqueuelen:10
          RX bytes:74357277 (74.3 MB)  TX bytes:3233489568 (3.2 GB)

I've transferred more than 3Gb from server to client and so far it's
rock stable. Now I'll transfer from client to server, but it should not
make any difference. It may have more to do with the newer kernel then
to the cryptoapi stuff. 

To make sure, I'll also test Ubuntu 8.0.3 (kernel 2.6.24) and Fedora 7
(kernel 2.6.23) with cryptoapi. It was not crashing any more, thanks to
David's patches for NAT-T, but the tunnel was not holding. If it works
there, than cryptoapi will definitely have something to do with the fix.

I'll keep you posted.

Giovani 
 

__________ Information from ESET NOD32 Antivirus, version of virus
signature database 4568 (20091103) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com