[strongSwan] unable to allocate SPIs from kernel

Milton Lie mlie at swbell.net
Tue Jan 3 15:40:13 CET 2012

Many thanks Tobias.
Tunnel is now established with my new kernel.


From: Tobias Brunner <tobias at strongswan.org>
To: Milton Lie <mlie at swbell.net>
Cc: Users at lists.strongswan.org
Sent: Tue, January 3, 2012 1:56:41 AM
Subject: Re: unable to allocate SPIs from kernel

Hi Milton,

> For some reasons, I don't see aes, hmac plugins on Nexus One device:

That's correct because the functionality of these plugins is provided by
the openssl plugin on Android.

> Which I assume is the issue?

No, as these plugins provide functionality for the IKEv2 charon daemon
and work solely in userland these have nothing with the "unable to
allocate SPIs from kernel" error message.

> I'm running the stock cyanogenmod kernel, which I assume has the
> appropriate E & A support?

That's more likely the problem.  I suppose the kernel lacks some of the
required modules (see [1] for a list).  There is a page on the
CyanogenMod wiki which explains how to build a custom kernel (see [2]).


[1] http://wiki.strongswan.org/projects/strongswan/wiki/KernelModules
[2] http://wiki.cyanogenmod.com/wiki/Building_Kernel_from_source
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120103/561708d3/attachment.html>

More information about the Users mailing list