[strongSwan] [KNL] received netlink error: No such file or directory (2) - unable to add SAD entry with SPI

[Thomas Egerer]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Conrad,

I submitted a patch to the linux kernel [1] which fixes the dependency
problem. Starting with kernel 4.5 it CONFIG_ECHAINIV should automatically
be selected by INET_ESP/INET6_ESP.

Cheers,
Thomas

[1] https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=32b6170ca59ccf07d0e394561e54b2cd9726038c

On 01/03/2016 11:34 PM, ck+strongswanusers at bl4ckb0x.de wrote:
> Hi Thomas!
> Sorry for my delay.
> 
>> Thomas Egerer <hakke_007 at gmx.de> hat am 29. Dezember 2015 um 21:57
>> geschrieben:
>>
>>
>> On 12/29/2015 04:11 PM, Conrad Kostecki wrote:
>>> Hi Thomas!
>>>
>>> Am 29.12.2015 um 00:12 schrieb Thomas Egerer:
>>>> btw, I forgot.
>>>> As root, try to run
>>>>
>>>> ip x s add \
>>>>
>>>>
>>>>      src ::0 \
>>>>      dst ::0 \
>>>>      proto esp spi 0xC0123456 mode tunnel \
>>>>      reqid 1 \
>>>>      enc 'aes'
>>>> 0x0102030405060708010203040506070801020304050607080102030405060708 \
>>>>      auth 'sha1' 0x0102030405060708090a0b0c0d0e0f0001020304
>>>>
>>>> and see if this succeeds.
>>>
>>> That one fails for me.
>>> -> RTNETLINK answers: No such file or directory
>> Gotcha! That's exactly what I was hoping for. It does not mean we've
>> solved the issue yet, but we can definitely rule out a problem with the
>> ike daemon at this point. It's most likeley your kernel configuration
>> which is missing an configuration option. Have you hand-rolled your
>> kernel or used the Gentoo-supplied version of the .config?
>> I have the feeling -- don't know why -- the IV-generator is missing.
> 
> Bingo! You are right. I seems, that I've overseen this somehow. After
> recompiling my kernel, the connection is now working.
> 
> Many Thanks!
> Conrad
> 
>> Can you post your kernel config? And the LKM-option I posted before,
>> might still give us a clue what's missing.
>>
>> Cheers,
>> Thomas
>>
>>>
>>>> If this works then apparently all of the modules are present.
>>> I've run the check.sh from [1] and don't see any missing modules.
>>> I don't understand, what could be missing?
>>> See my results: http://pastebin.com/CAamjE8k
>>>
>>> [1] https://wiki.strongswan.org/projects/strongswan/wiki/KernelModules
>>>
>>> Cheers
>>> Conrad
>>> _______________________________________________
>>> Users mailing list
>>> Users at lists.strongswan.org
>>> https://lists.strongswan.org/mailman/listinfo/users
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.strongswan.org
>> https://lists.strongswan.org/mailman/listinfo/users
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJWq9dgAAoJEGK31ONirBTGV+EQALXjYyt6T5P1gQMNrokkxZ7N
mWkDQ7pV0cjF6wLowEHK3ThepD9KtvlJQPpQDoQ3NSBLzOS3d8E+KWxKjupXz7zj
kLhzYLjCh6sAxLduZI6n3UXRYwLSPpV6r2VjBRoGH1l84fRoSU4pp28dEsnEioZY
KoY7I2/Z6mVfiMEVLuXnl9oSrgcUTmTr7mbD2J870Lo1MBXcChsq3qwm+i1599xr
HlOeUzvSruyJMxCgNtjVZz46pPT6FMJcNvCRddBobH8L27aHZCbqeo7QiaLUHjk3
bAG4HiJs7vR4w+Wguyd2gKHaUM25yn4WxKz/k0moHZtrF5wE8bj3+2ary+hPGJFL
FBVyqfNMbzJ+bg74eeVTiDpolUzzkJW4OSapwn6BpfUXNg8QjuXYh+7SEBrlL475
3Fsw2cp0/00KT02YTuK7UcD9BR0SFtVxGR6Z3wA2B754uBfYxHu3B57twb774kcV
+KKCs8LJseiCsO3v3Sj7R1caSoK8WSma9bsldxtXfP2KnYu2hYWO+JjIKoL4NwjA
jnLDD3k61IycitSh0VDo/Hj81HKIk9KFGhgAinpKA8K6JSVh5OVrjUKJRg+0fe1Z
oS6kUsIQ/UxfGIxAqRiZAC9QJlNnwnJMxLiMBZCuQ3RLX2eao53ZUx4DqUVlb9zg
2BKAF50WPddfOplKwpi7
=cgs8
-----END PGP SIGNATURE-----