From: Markus Schaefer (Markus.Schaefer_at_epygi.de)
Date: Mon Oct 14 2002 - 15:53:01 CEST
HiHo
I am currently updating from freeswan 1.91 to
1.98b. Starting a manual conn in 1.98b leads to the
following error-msg:
ipsec manual --up mango
/lib/ipsec/spigrp --label mango: Trouble building pfkey message, error=-22.
Segmentation fault
I am using a cross-compiler for a ppc-enviroment.
"Ha, that's it. You did something wrong here." Well
I doubt it. I couldn't see any compiler errors/warnings/problems
(after some mangling of makefiles, that is).
so i suppose the build of klips and pluto is pretty much ok.
Besides the version 1.91 worked fine and RSA and preshared
connections work pretty well in 1.98b. So only manual is a problem
BTW: calling pf_key directly does pretty much the same.
ipsec pf_key
pf_key: Trouble building pfkey message, error=-22.
Segmentation fault
As you can see the up-process is able to setup
a spi and spigrp, but fails somewhere after this.
Does anyone have any idea, similiar problems?
I can provide some more details if nesseccary.
ciao and thanks
markus
some barfing follows.
---------------------------------------------------------------------------
bash-2.05# ipsec setup --status
IPsec running
pluto pid 429
bash-2.05# cat /etc/ipsec.conf
config setup
interfaces=%defaultroute
klipsdebug=all
plutodebug=all
plutoload=%search
plutostart=%search
# nat_traversal=yes
# keep_alive=yes
uniqueids=yes
manualstart=
conn mango
left=%defaultroute
right=192.168.13.196
spi=0x100
esp=3des-md5-96
espenckey=0x11111111_11111111_11111111_11111111_11111111_11111111
espauthkey=0x11111111_11111111_11111111_11111111
---------------------------------------------------------------------------
bash-2.05# cat /proc/net/ipsec_spi
esp0x100_at_192.168.13.196 ESP_3DES_HMAC_MD5: dir=out src=192.168.13.216
iv_bits=64bi
ts iv=0x0a5a0c4f64e44dfb alen=128 aklen=128 eklen=192
life(c,s,h)=addtime(198,0,0)
---------------------------------------------------------------------------
bash-2.05# cat /proc/net/ipsec_spigrp
esp0x100_at_192.168.13.196
---------------------------------------------------------------------------
bash-2.05# cat /proc/net/ipsec_tncfg
ipsec0 -> eth1 mtu=16260(1500) -> 1500
ipsec1 -> NULL mtu=0(0) -> 0
ipsec2 -> NULL mtu=0(0) -> 0
ipsec3 -> NULL mtu=0(0) -> 0
---------------------------------------------------------------------------
bash-2.05# cat /proc/net/ipsec_eroute
-empty-
---------------------------------------------------------------------------
bash-2.05# ifconfig
eth0 Link encap:Ethernet HWaddr 00:09:BD:00:04:14
inet addr:172.32.0.1 Bcast:172.32.255.255 Mask:255.255.0.0
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:707 errors:0 dropped:0 overruns:0 frame:0
TX packets:3 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:91430 (89.2 kb) TX bytes:126 (126.0 b)
Base address:0xe00
eth1 Link encap:Ethernet HWaddr 00:09:BD:00:04:15
inet addr:192.168.13.216 Bcast:192.168.13.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:821 errors:0 dropped:0 overruns:0 frame:0
TX packets:137 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:101816 (99.4 kb) TX bytes:40863 (39.9 kb)
Base address:0x3c00
ipsec0 Link encap:Ethernet HWaddr 00:09:BD:00:04:15
inet addr:192.168.13.216 Mask:255.255.255.0
UP RUNNING NOARP MTU:16260 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:10
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:0.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:6 errors:0 dropped:0 overruns:0 frame:0
TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:588 (588.0 b) TX bytes:588 (588.0 b)
------------------------------------------------------
markus schaefer --- software engineer
epygi labs de gmbh
herrenstrasse 23
d-76133 karlsruhe, germany
tel: +49 (721) 205 96 30 -- fax: +49 (721) 205 96 59
mailto:markus.schaefer_at_epygi.de
http://www.epygi.de
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.5 : Tue Oct 15 2002 - 05:20:26 CEST