[strongSwan] AES-GCM for ESP

Randy Wyatt rwwyatt01 at gmail.com
Wed Jul 8 01:01:10 CEST 2015


Sometimes try loading the module from the directory
cd /lib/modules/3.13.0-55-generic/kernel/crypto

and then do your modprobe.

I see this problem with other modules quite frequently.

On Tue, Jul 7, 2015 at 3:58 PM, Joshua Liebow-Feeser <joshlf13 at gmail.com>
wrote:

> Yep - 3.13.0-55.
>
> On Tue, Jul 7, 2015 at 3:55 PM, Randy Wyatt <rwwyatt01 at gmail.com> wrote:
>
>> is 3.13.0-55 your running kernel or an older kernel.  Ubuntu is up to 57
>> at least.  The module build and kernel version has to match.
>>
>> On Tue, Jul 7, 2015 at 3:47 PM, Noel Kuntze <noel at familie-kuntze.de>
>> wrote:
>>
>>>
>>> -----BEGIN PGP SIGNED MESSAGE-----
>>> Hash: SHA256
>>>
>>> Hello Joshua,
>>>
>>> Look in the wiki article about pcrypt[1].
>>>
>>> [1] https://wiki.strongswan.org/projects/strongswan/wiki/Pcrypt
>>>
>>> Mit freundlichen Grüßen/Kind Regards,
>>> Noel Kuntze
>>>
>>> GPG Key ID: 0x63EC6658
>>> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
>>>
>>> Am 08.07.2015 um 00:37 schrieb Joshua Liebow-Feeser:
>>> > OK, I'll try that. What would be the invocation to load the drivers
>>> equivalent to the *modprobe* command that I used?
>>> >
>>> > On Tue, Jul 7, 2015 at 2:21 PM, Noel Kuntze <noel at familie-kuntze.de
>>> <mailto:noel at familie-kuntze.de>> wrote:
>>> >
>>> >
>>> > Hello Joshua,
>>> >
>>> > Well, try to use crconf instead.
>>> > Load the crypto_user module before using crconf.
>>> > Look at the PKGBUILD[1] for the crconf package for Arch Linux
>>> > for hints towards building it
>>> >
>>> > [1] https://aur.archlinux.org/packages/cr/crconf/PKGBUILD
>>> >
>>> > Mit freundlichen Grüßen/Kind Regards,
>>> > Noel Kuntze
>>> >
>>> > GPG Key ID: 0x63EC6658
>>> > Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
>>> >
>>> > Am 07.07.2015 um 23:17 schrieb Joshua Liebow-Feeser:
>>> > > Hi,
>>> >
>>> > > I'm trying to set up strongSwan to use AES-GCM as the encryption
>>> algorithm for ESP. I'd like this to be parallelized, so I'm trying to use
>>> pcrypt, but whenever I try to instantiate the proper kernel support, I get
>>> errors:
>>> >
>>> > > $ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
>>> > > FATAL: Error inserting tcrypt
>>> (/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in
>>> module, or unknown parameter (see dmesg)
>>> > > $ dmesg | tail -n 1
>>> > > [...] tcrypt: one or more tests failed!
>>> >
>>> > > Any idea what's going on here or how I could fix it? Thanks!
>>> > > Cheers,
>>> > > Josh
>>> >
>>> >
>>> > > _______________________________________________
>>> > > Users mailing list
>>> > > Users at lists.strongswan.org <mailto:Users at lists.strongswan.org>
>>> > > https://lists.strongswan.org/mailman/listinfo/users
>>> >
>>> >
>>> >
>>>
>>> -----BEGIN PGP SIGNATURE-----
>>> Version: GnuPG v2
>>>
>>> iQIcBAEBCAAGBQJVnFcUAAoJEDg5KY9j7GZYk/IP/31w8BViHAnw95i6prG0hlQr
>>> Hf9q0/9FYcuwiPxhbk2KXAcY9HFy5lZyXY7W7xT0dWeEYzwK9lbxersSnnHkNihK
>>> 360f3TOSYJKEMqRMsNHjnJTYO0HCjLQ6XxrW4j19pzqbgyni3zgTnr4GM05WfjYD
>>> +0PiXZ8AGyHQW6wrZgKQkAIuRBia+xiBl1DeOoUKEF168b7NiaXh/pLSDbj0k//4
>>> lXo2xrInmNMxQPyoGDpDhh++2yJ7qmF85SfOm8DSEJnjArB+Ww+N2EJh902jIcUR
>>> wYAxSv90g+mqC1iCQvE27tPwGsamkF6Yi/819p0jV/bGUvoqbhizHEoW46JlDBJt
>>> z5NR9lRqxalTMA1+DG8ws+AVVn5A/UWEpczOZiD6oFwkTWfuW0VXwV7Szq9qIcIk
>>> I+4iaHdT4pp31f+d2UQ87dZhjWttWzAmo84Eg+KjuC2jw0k+BKCv8gBsAd8oBiD7
>>> FzWFy+yhGhl1UzCnWKzFswCmV75/TMExxM5s4SetfAwZmb5cur9Z4PvCCwWz/qsj
>>> nYf0qj9x6A4gpDJGB4WBG4QcOjYeCYgm8+2ctq4ll+840Ai2KsDMUZReEAssLoo9
>>> 9+zb4dB2tSEjlS18VYxiBwWSoX1CI8SL3W0u9BA9WN8A+PY/Ktx3CVNy/iF3S8eJ
>>> yJ/PaSpzJPO0XBPBC7pX
>>> =0Y8/
>>> -----END PGP SIGNATURE-----
>>>
>>> _______________________________________________
>>> Users mailing list
>>> Users at lists.strongswan.org
>>> https://lists.strongswan.org/mailman/listinfo/users
>>
>>
>>
>>
>>
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20150707/77785f90/attachment.html>


More information about the Users mailing list