[Openswan Users] centos 5 and klips

[Paul Wouters]

On Tue, 17 Nov 2009, Admin wrote:

> On my latest centos 5 release i386 with kernel 2.6.18-164.6.1.el5 try to
> use OSW 2.6.22. In some threat i read that nat-t patch is not necessary
> for my kernel version so i simply use:
>
> #tar zxvf openswan-2.6.22.tar.gz
> #cd openswan-2.6.22

No the NAT-T patch is no longer needed for 2.6.23+ but you will need it for 2.6.18-164.6.1

> All is ok but i change in file /openswan-2.6.22/modobj26/ipsec_xmit.c:
> NF_INET_LOCAL_OUT to NF_IP_LOCAL_OUT

Try 2.6.23 or 2.6.24rc3 for the latest KLIPS code.

> but system crash very often with kernel fault like:
>
> Call Trace:
> [<f92c25b1>] ipsec_snprintf+0x27/0x3a [ipsec]
> [<f92baef1>] ipsec_tncfg_get_info+0xe9/0x1c4 [ipsec]
> [<f92bae08>] ipsec_tncfg_get_info+0x0/0x1c4 [ipsec]

Did you apply a patch from redhat for programs/tncfg? or use their
userland with the broken patch?

Paul