[strongSwan] On what feature does ESN depend?

[Noel Kuntze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Martin,

Yes, that is caused by specifying "-esn" in the esp line. The same line without "-esn" works
just fine. I have ipcomp working just fine. That is quite weird then. I'll boot the newest kernel then and see
if it works then.

Mit freundlichen Grüßen/Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 17.12.2014 um 10:14 schrieb Martin Willi:
> Noel,
>
>> I just tried to use esn (extended sequence numbers), but the responder got that error:
>>
>> parsed CREATE_CHILD_SA request 2 [ N(IPCOMP_SUP) SA No KE TSi TSr ]
>> received netlink error: No such file or directory (2)
>> unable to add SAD entry with SPI cb1c9923
>
> Can you confirm that this error is related to the use of ESN, and not
> the use of IPComp? Have you tried to disable IPcomp? If it works
> without, you are probably lacking IPComp support or the used compression
> algorithm.
>
>> On what kernel feature does esn depend? Is there an extra module for it?
>
> ESN support was introduced with Linux 2.6.39, so unless your kernel has
> a regression it should support it. ESN support at least on my kernel is
> no option or module, and is always included in XFRM.
>
> Regards
> Martin
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJUkeBRAAoJEDg5KY9j7GZYKJgQAJ/vXQMMyQyf79RFPCpi9BlS
nJYzMAMohukPRgiJ4u3PrnRiV+H+LF/lBvZMdePoSb/FlGxb55jajUWJ1Z0q06cq
B5lXI9id/3xkOXvkynON6cpCZOAplO/vIBQbj833jMJeA7rpZhWXHHMJ5BO+1I33
xSr1qREv/nCVEFL7PvOHtzBhYHDREUGwffR1bsqDYhSHKAD7em/mgJrX3/0GkSJE
epy4OLjOv/Gr61BFbYuldbOT/PMrw+rlrmT5xEEVzOKAUAY7FfJAABp+s4Wkrg8t
6+zEOMUjiDlUdNaJlUK6lbP2HjWkf7p9bG+OxGsp6ryoQXI8Cx8PtIGry7qzjqpw
F0a2hJ6GCZs+C6VZlDq8ELp54J1HJyWv5SNloYtSa8A9ZELwvgMIEZnwneZ7RDxr
D6p7J3PM0CkrtUPVDKplcclS2SLnWzadYN0P36/lRFNchy1Vfgq6QEsiuRx/35Ay
suGd3jY0BEjvmftOv8RC7HGcja7xFSdcymQrSWKr49eK4gNkPOh3Y5Yrt9dTVi1d
euqJEd+L+kc225ozoASms/clHFoMg2tk244v7/dmMFTa+Hf8jWOJz3OqrkhMni1/
D5Xl9NW8K2wSTrQMgKNmlHicgfM4xImMP00fpKskJjICBCIpERAVcebwOLIfRcy1
GQcO2t7iuZxck21UaPnB
=nfNn
-----END PGP SIGNATURE-----