[strongSwan] unable to allocate SPIs from kernel

Milton Lie mlie at swbell.net
Tue Jan 3 03:54:17 CET 2012

Hi Tobias,

I'm trying to duplicate a working unbuntu strongswan client configuration on an 
Android Nexus One (passion) device.
Running cyanogenmod 7.1.0 (gingerbread, 2.3.7).

I'm getting "unable to allocate SPIs from kernel".
For some reasons, I don't see aes, hmac plugins on Nexus One device:

# stroke statusall
Status of IKEv2 charon daemon (strongSwan 4.6.1):
  uptime: 9 minutes, since Jan 03 02:28:48 2012
  worker threads: 10 of 16 idle, 5/1/0/0 working, job queue: 0/0/0/0, scheduled: 
  loaded plugins: openssl fips-prf random pubkey pkcs1 pem xcbc hmac 
kernel-netlink socket-default android stroke eap-identity eap-mschapv2 eap-md5

Which I assume is the issue?
On ubuntu client:

$ sudo ipsec statusall
Status of IKEv2 charon daemon (strongSwan 4.6.1):
  uptime: 32 minutes, since Jan 02 20:13:28 2012
  malloc: sbrk 270336, mmap 0, used 165152, free 105184
  worker threads: 9 of 16 idle, 6/1/0/0 working, job queue: 0/0/0/0, scheduled: 
  loaded plugins: aes des sha1 sha2 md5 random x509 revocation constraints 
pubkey pkcs1 pgp pem fips-prf gmp xcbc hmac attr kernel-netlink resolve 
socket-raw stroke updown eap-aka

I'm running the stock cyanogenmod kernel, which I assume has the appropriate E & 
A support?

Your help would be greatly appreciated.
Let me know if you need additional information.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120102/eefefd84/attachment.html>

More information about the Users mailing list