<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>VS: [strongSwan] Strongswan on android gingerbread</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>HI again,<BR>
good news, charon is up and running and I am 90% on the way to manage a connection!<BR>
So, I set up strong swan both on the emulator and a linux machine (gateway). The certificate is ok on the gateway and the IKEv2<BR>
protocol goes fine all the way until the android emulator gets a virtual IP assigned by the gateway.<BR>
And here is when I get this error:<BR>
<BR>
I/charon ( 513): 10[IKE] installing new virtual IP 10.3.0.6<BR>
I/charon ( 513): 10[KNL] received netlink error: Function not implemented (38)<BR>
I/charon ( 513): 10[KNL] unable to add SAD entry with SPI c5ff9236<BR>
I/charon ( 513): 10[KNL] received netlink error: Function not implemented (38)<BR>
I/charon ( 513): 10[KNL] unable to add SAD entry with SPI c9901947<BR>
I/charon ( 513): 10[IKE] unable to install inbound and outbound IPsec SA (SAD) in kernel<BR>
I/charon ( 513): 10[CFG] status of Android plugin changed: 101<BR>
I/charon ( 513): 10[KNL] received netlink error: No such process (3)<BR>
I/charon ( 513): 10[KNL] unable to delete SAD entry with SPI c9901947<BR>
I/charon ( 513): 10[IKE] received AUTH_LIFETIME of 3372s, scheduling reauthentication in 2772s<BR>
I/charon ( 513): 10[IKE] peer supports MOBIKE<BR>
<BR>
I found an identical issue on the mailing list from 2009 with title: Kernel NETKEY issue with charon<BR>
<BR>
Here the solution was to patch the xfrm_algo.c file in the kernel, but I am using a newer version of the kernel (goldfish 2.6.29)<BR>
which seems to have that file already patched.<BR>
<BR>
Function not implemented seems to be a very general error. I double checked that I have enabled all the required modules in the kernel (since once before I got<BR>
errors due to having forgotten to enable CONFIG_NET_KEY...).<BR>
What else could it be? (just as a note I have note enabled anything extra with the cryptographic API modules. )<BR>
<BR>
Federico<BR>
<BR>
<BR>
<BR>
-----Opprinnelig melding-----<BR>
Fra: users-bounces+sibxol=btconnect.com@lists.strongswan.org på vegne av Tobias Brunner<BR>
Sendt: fr 21.10.2011 16:53<BR>
Til: Mancini, Federico<BR>
Kopi: users@lists.strongswan.org<BR>
Emne: Re: [strongSwan] Strongswan on android gingerbread<BR>
<BR>
> But what about just copying the android.mk file from the source tree<BR>
> inside the folder I get from extracting the<BR>
> strongswan-4.2.9-stable-4853.tar.bz2 file instead? Would that work?<BR>
<BR>
No, not really. There were quite a lot changes needed to make<BR>
strongSwan run on Android. Now, strongSwan 4.2.9 is nearly three years<BR>
old and building strongSwan with Android.mk has not been supported until<BR>
4.4.0, which we released about 1.5 years ago. Is there any reason you<BR>
want to use 4.2.9 specifically and not a current version? Also, there<BR>
have been several Android-specific changes in the last few weeks so I'd<BR>
actually recommend you use 4.6.0 which we intend to release in a few<BR>
weeks (i.e. use the current master branch via git for now).<BR>
<BR>
Regards,<BR>
Tobias<BR>
<BR>
_______________________________________________<BR>
Users mailing list<BR>
Users@lists.strongswan.org<BR>
<A HREF="https://lists.strongswan.org/mailman/listinfo/users">https://lists.strongswan.org/mailman/listinfo/users</A><BR>
<BR>
<BR>
<BR>
</FONT>
</P>
</BODY>
</HTML>