[Openswan Users] centos 5 and klips

Admin linuzmin at tdnet.it
Tue Nov 17 12:49:41 EST 2009


On my latest centos 5 release i386 with kernel 2.6.18-164.6.1.el5 try to
use OSW 2.6.22. In some threat i read that nat-t patch is not necessary
for my kernel version so i simply use:

#tar zxvf openswan-2.6.22.tar.gz
#cd openswan-2.6.22
#export KERNELSRC=/usr/src/kernel/MyVersion
#make module 
#make module_install

All is ok but i change in file /openswan-2.6.22/modobj26/ipsec_xmit.c:
NF_INET_LOCAL_OUT to NF_IP_LOCAL_OUT

#make programs
#make programs install

All seems ok so I change in ipsec.conf:

protostack=netkey to protostack=klips

load my new modules and start ipsec

# modprobe ipsec
# service ipsec start

but system crash very often with kernel fault like:

Call Trace:
 [<f92c25b1>] ipsec_snprintf+0x27/0x3a [ipsec]
 [<f92baef1>] ipsec_tncfg_get_info+0xe9/0x1c4 [ipsec]
 [<f92bae08>] ipsec_tncfg_get_info+0x0/0x1c4 [ipsec]
 [<c04a4827>] proc_file_read+0x100/0x224
 [<c04a4727>] proc_file_read+0x0/0x224
 [<c047331c>] vfs_read+0x9f/0x141
 [<c047376a>] sys_read+0x3c/0x63
 [<c0404f17>] syscall_call+0x7/0xb

Some is wrong ? Help is appreciated!

Alessio



More information about the Users mailing list