[Openswan Users] OpenSwan and vServer

[Paul Wouters]

On Tue, 8 Feb 2011, Christian Bäcker wrote:

>
> I have a problem with ipsec compiled as kernel modules and vServer.

AFAIK, only very recent versions of vServer support IPsec within the guests.

> ipsec_setup: Starting Openswan IPsec 2.4.12...
> ipsec_setup: ERROR: Failed to load or detect KLIPS and NETKEY

Looks like you don't have any ipsec visible to your guest. Note that 2.4.12 should
not be used, and you should go to at least 2.4.15, otherwise you are vulnerable to
two CVE's.

> openswan: 2.6.28+dfsg-5

That's not the version of openswan according to your logs.

> util-vserver: 0.30.216~r2772-6
> vserver: 2.3.0.35

I've CC:ed Patrick who knows a little more about vServer.

Paul