[strongSwan] charon-systemd: 11[KNL] received netlink error: No such file or directory (2)

[Tobias Brunner]

Hi Michael,

> On the embedded device we have the following logs entries:
> 
> SYS DLOG 346 log info verbose 1 charon-systemd: 11[CHD] CHILD_SA
> imx-nad{1004} state change: CREATED => INSTALLING
> SYS DLOG 346 log info verbose 1 charon-systemd: 11[CHD]   using
> CHACHA20_POLY1305 for encryption
> SYS DLOG 346 log info verbose 1 charon-systemd: 11[CHD] adding inbound
> ESP SA
> SYS DLOG 346 log info verbose 1 charon-systemd: 11[KNL] received netlink
> error: No such file or directory (2)
> SYS DLOG 346 log info verbose 1 charon-systemd: 11[KNL] unable to add
> SAD entry with SPI c106f683 (FAILED)
> 
> lsmod shows that the module is loaded:
> 
> # lsmod
> Module                  Size  Used by
> chacha_generic         16384  0
> poly1305_generic       16384  0
> chacha20poly1305       20480  0
> 
> Any ideas what might be wrong in the setup? Any  ideas howto debug further?

Do you by any chance have FIPS mode enabled?  (The kernel's crypto API 
will return ENOENT when trying to instantiate an algorithm that's not 
FIPS-approved, which I think chacha20poly1305 isn't.)

Regards,
Tobias