[Openswan Users] KLIPS on Ubuntu 14.04.3 LTS

[Tomasz Grzelak]

Hi,

doesn't anyone use KLIPS on recent systems to know what might be the issue
described below?
Or what is required to run Openswan in the KLIPS mode (e.g. is kernel
patching required for this)?

Best Regards,
Tomek

2015-09-29 8:10 GMT+02:00 Tomasz Grzelak <tgrzelak at gmail.com>:

> Hello All,
>
> I've always used NETKEY protocol stack with OpenSwan, but I have a case
> now where route-based ipsec would be more appropriate. As far as I know
> having it in the KLIPS mode would give me ipsecX interfaces and I could
> route traffic accordingly.
>
> However I am not able to load the ipsec module into the kernel.
>
> The OS is Ubuntu 14.04.3 LTS, kernel 3.13.0-63-generic.
>
> #ipsec version produces the following:
>
> Linux Openswan U2.6.45/K3.13.0-63-generic (netkey)
>
> (the Openswan was downloaded and compiled from source, because trying to
> build the ipsec.ko module from repo packages was throwing compilation
> errors).
>
> Now when I try to load the module I'm getting the following error:
>
> ---
> :~# modprobe -v ipsec
> insmod /lib/modules/3.13.0-63-generic/updates/dkms/ipsec.ko
> modprobe: ERROR: could not insert 'ipsec': Unknown symbol in module, or
> unknown parameter (see dmesg)
> ---
>
> Latest lines of dmesg are showing this:
>
> ---
> [76339.609983] NET: Unregistered protocol family 15
> [76339.641278] NET: Registered protocol family 15
> [76339.697465] Initializing XFRM netlink socket
> [76369.293656] ipsec: Unknown symbol ipsec_ocf_sa_init (err 0)
> [76369.293703] ipsec: Unknown symbol ipsec_ocf_comp_sa_init (err 0)
> [76369.293712] ipsec: Unknown symbol ipsec_ocf_sa_free (err 0)
> [76369.293727] ipsec: Unknown symbol ipsec_ocf_rcv (err 0)
> [76369.293766] ipsec: Unknown symbol ipsec_ocf_init (err 0)
> [76369.293774] ipsec: Unknown symbol ipsec_ocf_xmit (err 0)
> [76376.877456] ipsec: Unknown symbol ipsec_ocf_sa_init (err 0)
> [76376.877501] ipsec: Unknown symbol ipsec_ocf_comp_sa_init (err 0)
> [76376.877521] ipsec: Unknown symbol ipsec_ocf_sa_free (err 0)
> [76376.877534] ipsec: Unknown symbol ipsec_ocf_rcv (err 0)
> [76376.877571] ipsec: Unknown symbol ipsec_ocf_init (err 0)
> [76376.877578] ipsec: Unknown symbol ipsec_ocf_xmit (err 0)
> ---
>
> Do I need to recompile the kernel with some specific options or patches to
> get KLIPS working or is it not supported anymore?
>
> Best Regards,
> Tomek
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openswan.org/pipermail/users/attachments/20150930/912669ad/attachment.html>