[Openswan Users] centos 5 and klips

Admin linuzmin at tdnet.it
Tue Nov 24 12:23:51 EST 2009



On 17/11/2009 at 16.09 -0500, Paul Wouters wrote:
> On Tue, 17 Nov 2009, Admin wrote:
> 
> > On my latest centos 5 release i386 with kernel 2.6.18-164.6.1.el5 try to
> > use OSW 2.6.22. In some threat i read that nat-t patch is not necessary
> > for my kernel version so i simply use:
> >
> > #tar zxvf openswan-2.6.22.tar.gz
> > #cd openswan-2.6.22
> 
> No the NAT-T patch is no longer needed for 2.6.23+ but you will need it for 2.6.18-164.6.1

OK I apply it

> 
> > All is ok but i change in file /openswan-2.6.22/modobj26/ipsec_xmit.c:
> > NF_INET_LOCAL_OUT to NF_IP_LOCAL_OUT
> 
> Try 2.6.23 or 2.6.24rc3 for the latest KLIPS code.

With 2.6.23 version no error occured in compiling

> 
> > but system crash very often with kernel fault like:
> >
> > Call Trace:
> > [<f92c25b1>] ipsec_snprintf+0x27/0x3a [ipsec]
> > [<f92baef1>] ipsec_tncfg_get_info+0xe9/0x1c4 [ipsec]
> > [<f92bae08>] ipsec_tncfg_get_info+0x0/0x1c4 [ipsec]
> 
> Did you apply a patch from redhat for programs/tncfg? or use their
> userland with the broken patch?

I use the default userland programs, where can i find the right patch ?

Thanks,

Alessio





More information about the Users mailing list