[Openswan Users] KLIPS on Ubuntu 14.04.3 LTS

[Tomasz Grzelak]

Hello All,

I've always used NETKEY protocol stack with OpenSwan, but I have a case now
where route-based ipsec would be more appropriate. As far as I know having
it in the KLIPS mode would give me ipsecX interfaces and I could route
traffic accordingly.

However I am not able to load the ipsec module into the kernel.

The OS is Ubuntu 14.04.3 LTS, kernel 3.13.0-63-generic.

#ipsec version produces the following:

Linux Openswan U2.6.45/K3.13.0-63-generic (netkey)

(the Openswan was downloaded and compiled from source, because trying to
build the ipsec.ko module from repo packages was throwing compilation
errors).

Now when I try to load the module I'm getting the following error:

---
:~# modprobe -v ipsec
insmod /lib/modules/3.13.0-63-generic/updates/dkms/ipsec.ko
modprobe: ERROR: could not insert 'ipsec': Unknown symbol in module, or
unknown parameter (see dmesg)
---

Latest lines of dmesg are showing this:

---
[76339.609983] NET: Unregistered protocol family 15
[76339.641278] NET: Registered protocol family 15
[76339.697465] Initializing XFRM netlink socket
[76369.293656] ipsec: Unknown symbol ipsec_ocf_sa_init (err 0)
[76369.293703] ipsec: Unknown symbol ipsec_ocf_comp_sa_init (err 0)
[76369.293712] ipsec: Unknown symbol ipsec_ocf_sa_free (err 0)
[76369.293727] ipsec: Unknown symbol ipsec_ocf_rcv (err 0)
[76369.293766] ipsec: Unknown symbol ipsec_ocf_init (err 0)
[76369.293774] ipsec: Unknown symbol ipsec_ocf_xmit (err 0)
[76376.877456] ipsec: Unknown symbol ipsec_ocf_sa_init (err 0)
[76376.877501] ipsec: Unknown symbol ipsec_ocf_comp_sa_init (err 0)
[76376.877521] ipsec: Unknown symbol ipsec_ocf_sa_free (err 0)
[76376.877534] ipsec: Unknown symbol ipsec_ocf_rcv (err 0)
[76376.877571] ipsec: Unknown symbol ipsec_ocf_init (err 0)
[76376.877578] ipsec: Unknown symbol ipsec_ocf_xmit (err 0)
---

Do I need to recompile the kernel with some specific options or patches to
get KLIPS working or is it not supported anymore?

Best Regards,
Tomek
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openswan.org/pipermail/users/attachments/20150929/d71a0613/attachment.html>