[strongSwan] [KNL] received netlink error: No such file or directory (2) - unable to add SAD entry with SPI

Thomas Egerer hakke_007 at gmx.de
Tue Dec 29 21:57:38 CET 2015


On 12/29/2015 04:11 PM, Conrad Kostecki wrote:
> Hi Thomas!
> 
> Am 29.12.2015 um 00:12 schrieb Thomas Egerer:
>> btw, I forgot.
>> As root, try to run
>>
>> ip x s add \
>>
>>
>>      src ::0 \
>>      dst ::0 \
>>      proto esp spi 0xC0123456 mode tunnel \
>>      reqid 1 \
>>      enc 'aes'
>> 0x0102030405060708010203040506070801020304050607080102030405060708 \
>>      auth 'sha1' 0x0102030405060708090a0b0c0d0e0f0001020304
>>
>> and see if this succeeds.
> 
> That one fails for me.
> -> RTNETLINK answers: No such file or directory
Gotcha! That's exactly what I was hoping for. It does not mean we've
solved the issue yet, but we can definitely rule out a problem with the
ike daemon at this point. It's most likeley your kernel configuration
which is missing an configuration option. Have you hand-rolled your
kernel or used the Gentoo-supplied version of the .config?
I have the feeling -- don't know why -- the IV-generator is missing.
Can you post your kernel config? And the LKM-option I posted before,
might still give us a clue what's missing.

Cheers,
Thomas

> 
>> If this works then apparently all of the modules are present.
> I've run the check.sh from [1] and don't see any missing modules.
> I don't understand, what could be missing?
> See my results: http://pastebin.com/CAamjE8k
> 
> [1] https://wiki.strongswan.org/projects/strongswan/wiki/KernelModules
> 
> Cheers
> Conrad
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20151229/955f152c/attachment.pgp>


More information about the Users mailing list