Menu
▾
▴
devil-linux-discuss
|
From: Martin G. <sou...@gl...> - 2005-11-22 16:30:04
|
Looks like Openswan (ipsec) is also not working in the latest builds - upon start, it complains about missing ipsec modules. I don't know if this is related to the other missing module posts - missing ip_ttl and ipt_connmark. Unfortunately, I don't have much time now to take a look for the cause of the problems or if they are even related. Martin |
|
From: Heiko Z. <he...@zu...> - 2005-11-22 16:45:59
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I don't have time myself, but I uploaded a test DL version to the FTP Server: ftp://ftp.devil-linux.org/pub/devel/testing/ It uses OpenSWAN 2.4.4, maybe that works better. On Tue, November 22, 2005 10:29, Martin Glazer wrote: > > Looks like Openswan (ipsec) is also not working in the latest builds - > upon start, it complains about missing ipsec modules. > > I don't know if this is related to the other missing module posts - > missing ip_ttl and ipt_connmark. > > Unfortunately, I don't have much time now to take a look for the cause of > the problems or if they are even related. > > Martin > > > > ------------------------------------------------------- > This SF.Net email is sponsored by the JBoss Inc. Get Certified Today > Register for a JBoss Training Course. Free Certification Exam > for All Training Attendees Through End of 2005. For more info visit: > http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > - -- Regards Heiko Zuerker http://www.devil-linux.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) iD8DBQFDg0sqUcytMSbs+YURAl2iAJ9qf1XWpZHfvbsaQxpXTiURjblzNwCeI1Re Sf4D7pzQubFg8fXYKJzA1uQ= =ZrOj -----END PGP SIGNATURE----- |
|
From: Martin G. <sou...@gl...> - 2005-11-22 16:55:48
|
On November 22, 2005 09:45, Heiko Zuerker wrote: > I don't have time myself, but I uploaded a test DL version to the FTP > Server: ftp://ftp.devil-linux.org/pub/devel/testing/ > > It uses OpenSWAN 2.4.4, maybe that works better. Thanks for the quick response.... I have already tried with the 2.4.4 version and there is still the same problem - I did find one issue with a misspelling of KLIPS in scripts/openswan, but during a recompile last night, this didn't fix it either. Martin |
|
From: Martin G. <sou...@gl...> - 2005-11-23 22:17:33
|
On November 22, 2005 09:29, Martin Glazer wrote:
> Looks like Openswan (ipsec) is also not working in the latest builds - upon
> start, it complains about missing ipsec modules.
>
> I don't know if this is related to the other missing module posts - missing
> ip_ttl and ipt_connmark.
>
> Unfortunately, I don't have much time now to take a look for the cause of
> the problems or if they are even related.
>
I looked into this a bit further and it looks like the ipsec module is being
built, but then it is being installed in the /lib/modules/{kernel_version}
directory of the lfssystem and not into the cdtree.
The kernel install also clears out the cdtree/lib/modules{kernel_version}
before installing the kernel modules there, so a manual copy will not help.
How was this handled before (prior to openswan 2.4.4)?
Any suggestions to work around this or where else to look for a solution?
Thx
Martin
|
|
From: Heiko Z. <he...@zu...> - 2005-11-24 01:10:39
|
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed, November 23, 2005 16:17, Martin Glazer wrote:
> On November 22, 2005 09:29, Martin Glazer wrote:
>
>> Looks like Openswan (ipsec) is also not working in the latest builds -
>> upon start, it complains about missing ipsec modules.
>>
>> I don't know if this is related to the other missing module posts -
>> missing ip_ttl and ipt_connmark.
>>
>> Unfortunately, I don't have much time now to take a look for the cause
>> of the problems or if they are even related.
>>
>
> I looked into this a bit further and it looks like the ipsec module is
> being built, but then it is being installed in the
> /lib/modules/{kernel_version}
> directory of the lfssystem and not into the cdtree.
>
> The kernel install also clears out the cdtree/lib/modules{kernel_version}
> before installing the kernel modules there, so a manual copy will not
> help.
>
> How was this handled before (prior to openswan 2.4.4)?
>
>
> Any suggestions to work around this or where else to look for a solution?
I fixed the problem with the missing module.
What was that klips spelling error you mentioned?
- --
Regards
Heiko Zuerker
http://www.devil-linux.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFDhRMCUcytMSbs+YURAj5VAJ9uDjPpUIdq8Q0THd1ghKuJWLFjBQCgixMS
TOqBFZQeVDqeyhsr0dCm9ec=
=fVAD
-----END PGP SIGNATURE-----
|
|
From: Martin G. <sou...@gl...> - 2005-11-24 02:45:27
|
On November 23, 2005 18:10, Heiko Zuerker wrote:
> On Wed, November 23, 2005 16:17, Martin Glazer wrote:
> > On November 22, 2005 09:29, Martin Glazer wrote:
> >> Looks like Openswan (ipsec) is also not working in the latest builds -
> >> upon start, it complains about missing ipsec modules.
> >>
> >> I don't know if this is related to the other missing module posts -
> >> missing ip_ttl and ipt_connmark.
> >>
> >> Unfortunately, I don't have much time now to take a look for the cause
> >> of the problems or if they are even related.
> >
> > I looked into this a bit further and it looks like the ipsec module is
> > being built, but then it is being installed in the
> > /lib/modules/{kernel_version}
> > directory of the lfssystem and not into the cdtree.
> >
> > The kernel install also clears out the cdtree/lib/modules{kernel_version}
> > before installing the kernel modules there, so a manual copy will not
> > help.
> >
> > How was this handled before (prior to openswan 2.4.4)?
> >
> >
> > Any suggestions to work around this or where else to look for a solution?
>
> I fixed the problem with the missing module.
Thanks - I thought I tried your solution manually and found that because the
kernel modules were installed after openswan, they deleted the ipsec.o module
- I will try again with your solution from CVS.
>
> What was that klips spelling error you mentioned?
in scrips/super-freeswan under the build option
---> set_kernel_option CONFIG_KLIPS m
set_kernel_option CONFIG_IPSEC_ALG y
set_kernel_option CONFIG_IPSEC_ENC_AES
set_kernel_option CONFIG_IPSEC_ALG_NON_LIBRE n
set_kernel_option CONFIG_IPSEC_ALG_CRYPTOAPI m
---> set_kernel_option CONFIG_KLIPS m
set_kernel_option CONFIG_KLIPS_IPIP y
the line is repeated as well it says CONFIG_KLIBS and should read CONFIG_KLIPS
P instead of B
Martin
|
|
From: Heiko Z. <he...@zu...> - 2005-11-24 03:45:09
|
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed, November 23, 2005 20:44, Martin Glazer wrote:
> On November 23, 2005 18:10, Heiko Zuerker wrote:
>
>> On Wed, November 23, 2005 16:17, Martin Glazer wrote:
>>
>>> On November 22, 2005 09:29, Martin Glazer wrote:
>>>
>>>> Looks like Openswan (ipsec) is also not working in the latest
>>>> builds - upon start, it complains about missing ipsec modules.
>>>>
>>>> I don't know if this is related to the other missing module posts -
>>>> missing ip_ttl and ipt_connmark.
>>>>
>>>> Unfortunately, I don't have much time now to take a look for the
>>>> cause of the problems or if they are even related.
>>>
>>> I looked into this a bit further and it looks like the ipsec module
>>> is being built, but then it is being installed in the
>>> /lib/modules/{kernel_version}
>>> directory of the lfssystem and not into the cdtree.
>>>
>>> The kernel install also clears out the
>>> cdtree/lib/modules{kernel_version} before installing the kernel
>>> modules there, so a manual copy will not help.
>>>
>>> How was this handled before (prior to openswan 2.4.4)?
>>>
>>>
>>>
>>> Any suggestions to work around this or where else to look for a
>>> solution?
>>
>> I fixed the problem with the missing module.
>>
>
> Thanks - I thought I tried your solution manually and found that because
> the kernel modules were installed after openswan, they deleted the ipsec.o
> module - I will try again with your solution from CVS.
The Openswan makefile doesn't honor the DESTDIR variable when installing
the module, that was the reason why it was missing.
>>
>> What was that klips spelling error you mentioned?
>>
>
> in scrips/super-freeswan under the build option ---> set_kernel_option
> CONFIG_KLIPS m
> set_kernel_option CONFIG_IPSEC_ALG y set_kernel_option CONFIG_IPSEC_ENC_AES
> set_kernel_option CONFIG_IPSEC_ALG_NON_LIBRE n set_kernel_option
> CONFIG_IPSEC_ALG_CRYPTOAPI m
> ---> set_kernel_option CONFIG_KLIPS m
> set_kernel_option CONFIG_KLIPS_IPIP y
>
> the line is repeated as well it says CONFIG_KLIBS and should read
> CONFIG_KLIPS
> P instead of B
The module is not anymore compiled as part of the Kernel
We can remove all this stuff from the script (I should have enough time
this weekend ... hopefully).
- --
Regards
Heiko Zuerker
http://www.devil-linux.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFDhTc5UcytMSbs+YURAk1WAJ9Tm1Xpu/F+n561FJ1udSV2K7psyQCglvGr
31a5c3VVlKhXjAnA5SISZg4=
=OuBz
-----END PGP SIGNATURE-----
|
|
From: Martin G. <sou...@gl...> - 2005-11-24 16:22:11
|
On November 23, 2005 20:44, Heiko Zuerker wrote:
> On Wed, November 23, 2005 20:44, Martin Glazer wrote:
> > On November 23, 2005 18:10, Heiko Zuerker wrote:
> >> On Wed, November 23, 2005 16:17, Martin Glazer wrote:
> >>> On November 22, 2005 09:29, Martin Glazer wrote:
> >>>> Looks like Openswan (ipsec) is also not working in the latest
> >>>> builds - upon start, it complains about missing ipsec modules.
> >>>>
> >>>> I don't know if this is related to the other missing module posts -
> >>>> missing ip_ttl and ipt_connmark.
> >>>>
> >>>> Unfortunately, I don't have much time now to take a look for the
> >>>> cause of the problems or if they are even related.
> >>>
> >>> I looked into this a bit further and it looks like the ipsec module
> >>> is being built, but then it is being installed in the
> >>> /lib/modules/{kernel_version}
> >>> directory of the lfssystem and not into the cdtree.
> >>>
> >>> The kernel install also clears out the
> >>> cdtree/lib/modules{kernel_version} before installing the kernel
> >>> modules there, so a manual copy will not help.
> >>>
> >>> How was this handled before (prior to openswan 2.4.4)?
> >>>
> >>>
> >>>
> >>> Any suggestions to work around this or where else to look for a
> >>> solution?
> >>
> >> I fixed the problem with the missing module.
> >
> > Thanks - I thought I tried your solution manually and found that because
> > the kernel modules were installed after openswan, they deleted the
> > ipsec.o module - I will try again with your solution from CVS.
>
> The Openswan makefile doesn't honor the DESTDIR variable when installing
> the module, that was the reason why it was missing.
>
The fix still does not work...
Even though you copy the ipsec.o file into the kenel module directory, the
kernel is installed after openswan and during the kernel install, it deletes
everything in the module directory first.
I see 2 possible solutions -
- Place a conditional copy of the ipsec module in the linux kernel install
script after the kernel modules are installed.
- Change the order of compilation and compile/install openswan after the
kernel compile - as openswan does not patch the kernel any longer, this
should work. The only issue is with the nat-t patch, which does patch the
kernel, so one would have to do a conditional patch during the kernel build
of the nat-t patch.
> >> What was that klips spelling error you mentioned?
> >
> > in scrips/super-freeswan under the build option ---> set_kernel_option
> > CONFIG_KLIPS m
> > set_kernel_option CONFIG_IPSEC_ALG y set_kernel_option
> > CONFIG_IPSEC_ENC_AES set_kernel_option CONFIG_IPSEC_ALG_NON_LIBRE n
> > set_kernel_option CONFIG_IPSEC_ALG_CRYPTOAPI m
> > ---> set_kernel_option CONFIG_KLIPS m
> > set_kernel_option CONFIG_KLIPS_IPIP y
> >
> > the line is repeated as well it says CONFIG_KLIBS and should read
> > CONFIG_KLIPS
> > P instead of B
>
> The module is not anymore compiled as part of the Kernel
> We can remove all this stuff from the script (I should have enough time
> this weekend ... hopefully).
I'll play aroundand see if I can get it to work using the solutions above.
Martin
|
|
From: Heiko Z. <he...@zu...> - 2005-11-24 16:51:22
|
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Thu, November 24, 2005 10:22, Martin Glazer wrote:
> On November 23, 2005 20:44, Heiko Zuerker wrote:
>
>> On Wed, November 23, 2005 20:44, Martin Glazer wrote:
>>
>>> On November 23, 2005 18:10, Heiko Zuerker wrote:
>>>
>>>> On Wed, November 23, 2005 16:17, Martin Glazer wrote:
>>>>
>>>>> On November 22, 2005 09:29, Martin Glazer wrote:
>>>>>
>>>>>> Looks like Openswan (ipsec) is also not working in the latest
>>>>>> builds - upon start, it complains about missing ipsec modules.
>>>>>>
>>>>>> I don't know if this is related to the other missing module
>>>>>> posts - missing ip_ttl and ipt_connmark.
>>>>>>
>>>>>> Unfortunately, I don't have much time now to take a look for
>>>>>> the cause of the problems or if they are even related.
>>>>>
>>>>> I looked into this a bit further and it looks like the ipsec
>>>>> module is being built, but then it is being installed in the
>>>>> /lib/modules/{kernel_version}
>>>>> directory of the lfssystem and not into the cdtree.
>>>>>
>>>>> The kernel install also clears out the
>>>>> cdtree/lib/modules{kernel_version} before installing the kernel
>>>>> modules there, so a manual copy will not help.
>>>>>
>>>>> How was this handled before (prior to openswan 2.4.4)?
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Any suggestions to work around this or where else to look for a
>>>>> solution?
>>>>
>>>> I fixed the problem with the missing module.
>>>>
>>>
>>> Thanks - I thought I tried your solution manually and found that
>>> because the kernel modules were installed after openswan, they deleted
>>> the ipsec.o module - I will try again with your solution from CVS.
>>
>> The Openswan makefile doesn't honor the DESTDIR variable when
>> installing the module, that was the reason why it was missing.
>>
>
> The fix still does not work...
>
>
> Even though you copy the ipsec.o file into the kenel module directory,
> the kernel is installed after openswan and during the kernel install, it
> deletes everything in the module directory first.
>
> I see 2 possible solutions -
> - Place a conditional copy of the ipsec module in the linux kernel install
> script after the kernel modules are installed.
>
> - Change the order of compilation and compile/install openswan after the
> kernel compile - as openswan does not patch the kernel any longer, this
> should work. The only issue is with the nat-t patch, which does patch the
> kernel, so one would have to do a conditional patch during the kernel
> build of the nat-t patch.
>
>>>> What was that klips spelling error you mentioned?
>>>>
>>>
>>> in scrips/super-freeswan under the build option --->
>>> set_kernel_option CONFIG_KLIPS m
>>> set_kernel_option CONFIG_IPSEC_ALG y set_kernel_option
>>> CONFIG_IPSEC_ENC_AES set_kernel_option CONFIG_IPSEC_ALG_NON_LIBRE n
>>> set_kernel_option CONFIG_IPSEC_ALG_CRYPTOAPI m ---> set_kernel_option
>>> CONFIG_KLIPS m
>>> set_kernel_option CONFIG_KLIPS_IPIP y
>>>
>>> the line is repeated as well it says CONFIG_KLIBS and should read
>>> CONFIG_KLIPS
>>> P instead of B
>>>
>>
>> The module is not anymore compiled as part of the Kernel
>> We can remove all this stuff from the script (I should have enough time
>> this weekend ... hopefully).
>
> I'll play aroundand see if I can get it to work using the solutions
> above.
I think I found a better solution.
Looking at the Kernel Makefile, it only wipes out 'kernel' directory, but
leaves the rest alone.
I'll move the ipsec.o file into the '/lib/modules/2.4.*/net' directory.
- --
Regards
Heiko Zuerker
http://www.devil-linux.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFDhe97UcytMSbs+YURAnJUAJ4i/c9QdPyOcRSz7q1jssLHde9EcgCfdp0w
SepIDDTA+z6UEI6BpoNzS7E=
=F+FR
-----END PGP SIGNATURE-----
|
|
From: Martin G. <sou...@gl...> - 2005-11-25 04:46:53
|
On November 24, 2005 09:51, Heiko Zuerker wrote:
> On Thu, November 24, 2005 10:22, Martin Glazer wrote:
> > On November 23, 2005 20:44, Heiko Zuerker wrote:
> >> On Wed, November 23, 2005 20:44, Martin Glazer wrote:
> >>> On November 23, 2005 18:10, Heiko Zuerker wrote:
> >>>> On Wed, November 23, 2005 16:17, Martin Glazer wrote:
> >>>>> On November 22, 2005 09:29, Martin Glazer wrote:
> >>>>>> Looks like Openswan (ipsec) is also not working in the latest
> >>>>>> builds - upon start, it complains about missing ipsec modules.
> >>>>>>
> >>>>>> I don't know if this is related to the other missing module
> >>>>>> posts - missing ip_ttl and ipt_connmark.
> >>>>>>
> >>>>>> Unfortunately, I don't have much time now to take a look for
> >>>>>> the cause of the problems or if they are even related.
> >>>>>
> >>>>> I looked into this a bit further and it looks like the ipsec
> >>>>> module is being built, but then it is being installed in the
> >>>>> /lib/modules/{kernel_version}
> >>>>> directory of the lfssystem and not into the cdtree.
> >>>>>
> >>>>> The kernel install also clears out the
> >>>>> cdtree/lib/modules{kernel_version} before installing the kernel
> >>>>> modules there, so a manual copy will not help.
> >>>>>
> >>>>> How was this handled before (prior to openswan 2.4.4)?
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>> Any suggestions to work around this or where else to look for a
> >>>>> solution?
> >>>>
> >>>> I fixed the problem with the missing module.
> >>>
> >>> Thanks - I thought I tried your solution manually and found that
> >>> because the kernel modules were installed after openswan, they deleted
> >>> the ipsec.o module - I will try again with your solution from CVS.
> >>
> >> The Openswan makefile doesn't honor the DESTDIR variable when
> >> installing the module, that was the reason why it was missing.
> >
> > The fix still does not work...
> >
> >
> > Even though you copy the ipsec.o file into the kenel module directory,
> > the kernel is installed after openswan and during the kernel install, it
> > deletes everything in the module directory first.
> >
> > I see 2 possible solutions -
> > - Place a conditional copy of the ipsec module in the linux kernel
> > install script after the kernel modules are installed.
> >
> > - Change the order of compilation and compile/install openswan after the
> > kernel compile - as openswan does not patch the kernel any longer, this
> > should work. The only issue is with the nat-t patch, which does patch the
> > kernel, so one would have to do a conditional patch during the kernel
> > build of the nat-t patch.
> >
> >>>> What was that klips spelling error you mentioned?
> >>>
> >>> in scrips/super-freeswan under the build option --->
> >>> set_kernel_option CONFIG_KLIPS m
> >>> set_kernel_option CONFIG_IPSEC_ALG y set_kernel_option
> >>> CONFIG_IPSEC_ENC_AES set_kernel_option CONFIG_IPSEC_ALG_NON_LIBRE n
> >>> set_kernel_option CONFIG_IPSEC_ALG_CRYPTOAPI m ---> set_kernel_option
> >>> CONFIG_KLIPS m
> >>> set_kernel_option CONFIG_KLIPS_IPIP y
> >>>
> >>> the line is repeated as well it says CONFIG_KLIBS and should read
> >>> CONFIG_KLIPS
> >>> P instead of B
> >>
> >> The module is not anymore compiled as part of the Kernel
> >> We can remove all this stuff from the script (I should have enough time
> >> this weekend ... hopefully).
> >
> > I'll play aroundand see if I can get it to work using the solutions
> > above.
>
> I think I found a better solution.
> Looking at the Kernel Makefile, it only wipes out 'kernel' directory, but
> leaves the rest alone.
> I'll move the ipsec.o file into the '/lib/modules/2.4.*/net' directory.
Excellent...
thats why they pay you the big $$$ :-)
|
|
From: Heiko Z. <he...@zu...> - 2005-11-25 15:31:51
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > Excellent... > > > thats why they pay you the big $$$ :-) Yeah right... ;-) - -- Regards Heiko Zuerker http://www.devil-linux.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) iD8DBQFDhy5NUcytMSbs+YURAj9KAKCjfeFO6IekFOh0gBpNCNXVbGw84QCcCcDE ouyJR/sofJcBILf6SrAqSPs= =5rYv -----END PGP SIGNATURE----- |
