Re: kernel + moduły ipsec (freeswan)
Dominik Juszczyk wrote: Witam Mam klopot z uruchomieniem ipseca :( Gdy uzywam sourcow kernela 2.4.22 z debiana to: troche wiecej szczegolow: przy warunkach takich: - zrodla kernela z debiana (2.4.22) - laty do freeswana z debiana (newest) dostaje taki efekt podczas make bzImage: ar rcs zlib.a adler32.o deflate.o infblock.o infcodes.o inffast.o inflate.o inftrees.o infutil.o trees.o zutil.o match686.o make[4]: Leaving directory `/usr/src/kernel-source-2.4.22/net/ipsec/zlib' make[3]: Leaving directory `/usr/src/kernel-source-2.4.22/net/ipsec/zlib' make all_targets make[3]: Entering directory `/usr/src/kernel-source-2.4.22/net/ipsec' gcc -D__KERNEL__ -I/usr/src/kernel-source-2.4.22/include -Wall -Wstrict-prototypes -Wno-trigraphs -fno-strict-aliasing -fno-common -O2 -fomit-frame-pointer -pipe -mpreferred-stack-boundary=2 -march=i686 -Ilibfreeswan -Ilibdes -Wall -Wpointer-arith -Wstrict-prototypes -nostdinc -iwithprefix include -DKBUILD_BASENAME=ipsec_init -c -o ipsec_init.o ipsec_init.c In file included from /usr/src/kernel-source-2.4.22/include/linux/skbuff.h:27, from /usr/src/kernel-source-2.4.22/include/linux/netdevice.h:152, from ipsec_init.c:39: /usr/src/kernel-source-2.4.22/include/linux/highmem.h: In function `bh_kmap': /usr/src/kernel-source-2.4.22/include/linux/highmem.h:20: warning: pointer of type `void *' used in arithmetic ipsec_init.c: In function `ipsec_init': ipsec_init.c:152: too few arguments to function `inet_add_protocol' ipsec_init.c:156: too few arguments to function `inet_add_protocol' ipsec_init.c: In function `ipsec_cleanup': ipsec_init.c:199: too few arguments to function `inet_del_protocol' ipsec_init.c:204: too few arguments to function `inet_del_protocol' make[3]: *** [ipsec_init.o] Error 1 make[3]: Leaving directory `/usr/src/kernel-source-2.4.22/net/ipsec' make[2]: *** [first_rule] Error 2 make[2]: Leaving directory `/usr/src/kernel-source-2.4.22/net/ipsec' make[1]: *** [_subdir_ipsec] Error 2 make[1]: Leaving directory `/usr/src/kernel-source-2.4.22/net' make: *** [_dir_net] Error 2 asgard:/usr/src/kernel-source-2.4.22# help... -- Pozdrawiam, Dominik Juszczyk
Re[2]: kernel + moduły ipsec (freeswan)
Thursday, March 18, 2004 (11:26:49 AM) Dominik Juszczyk wpadł(a) na genialną myśl: DJ Dominik Juszczyk wrote: Witam Mam klopot z uruchomieniem ipseca :( Gdy uzywam sourcow kernela 2.4.22 z debiana to: DJ troche wiecej szczegolow: DJ przy warunkach takich: DJ - zrodla kernela z debiana (2.4.22) DJ - laty do freeswana z debiana (newest) DJ dostaje taki efekt podczas make bzImage: DJ ar rcs zlib.a adler32.o deflate.o infblock.o infcodes.o inffast.o DJ inflate.o inftrees.o infutil.o trees.o zutil.o match686.o DJ make[4]: Leaving directory DJ `/usr/src/kernel-source-2.4.22/net/ipsec/zlib' DJ make[3]: Leaving directory DJ `/usr/src/kernel-source-2.4.22/net/ipsec/zlib' DJ make all_targets DJ make[3]: Entering directory DJ `/usr/src/kernel-source-2.4.22/net/ipsec' DJ gcc -D__KERNEL__ -I/usr/src/kernel-source-2.4.22/include -Wall DJ -Wstrict-prototypes -Wno-trigraphs -fno-strict-aliasing -fno-common -O2 DJ -fomit-frame-pointer -pipe -mpreferred-stack-boundary=2 -march=i686 DJ -Ilibfreeswan -Ilibdes -Wall -Wpointer-arith -Wstrict-prototypes DJ -nostdinc -iwithprefix include -DKBUILD_BASENAME=ipsec_init -c -o DJ ipsec_init.o ipsec_init.c DJ In file included from DJ /usr/src/kernel-source-2.4.22/include/linux/skbuff.h:27, DJ from DJ /usr/src/kernel-source-2.4.22/include/linux/netdevice.h:152, DJ from ipsec_init.c:39: DJ /usr/src/kernel-source-2.4.22/include/linux/highmem.h: In function DJ `bh_kmap': DJ /usr/src/kernel-source-2.4.22/include/linux/highmem.h:20: warning: DJ pointer of type `void *' used in arithmetic DJ ipsec_init.c: In function `ipsec_init': DJ ipsec_init.c:152: too few arguments to function `inet_add_protocol' DJ ipsec_init.c:156: too few arguments to function `inet_add_protocol' DJ ipsec_init.c: In function `ipsec_cleanup': DJ ipsec_init.c:199: too few arguments to function `inet_del_protocol' DJ ipsec_init.c:204: too few arguments to function `inet_del_protocol' DJ make[3]: *** [ipsec_init.o] Error 1 DJ make[3]: Leaving directory DJ `/usr/src/kernel-source-2.4.22/net/ipsec' DJ make[2]: *** [first_rule] Error 2 DJ make[2]: Leaving directory DJ `/usr/src/kernel-source-2.4.22/net/ipsec' DJ make[1]: *** [_subdir_ipsec] Error 2 DJ make[1]: Leaving directory `/usr/src/kernel-source-2.4.22/net' DJ make: *** [_dir_net] Error 2 DJ asgard:/usr/src/kernel-source-2.4.22# Ja jakis czas temu kompilowalem 2.4.22 z kernel.org po uprzednim spaczowaniu grsecurity (jakims swiezym wtedy). Tylko, ze ipsec mialem juz z paczki i polecialo sposobem debianowym prosto z debian.org. Probowalem przedtem ze swiezym ipsec, ale mialem problem z cryptoapi, a ja juz nie mialem czasu ani ochoty drazyc. Poszlo jak napisalem i nie ma zadnych problemow przy ladowaniu modulow. Z tego co pamietam, to nawet przed kompilacja za wiele w ustawieniach ipsec nie zmienialem. -- Radosław Maliborski [ There are people who want a peace on Earth, a piece of Earth or just to piss on Earth... ]
kernel + moduły ipsec (freeswan)
Witam Mam klopot z uruchomieniem ipseca :( Gdy uzywam sourcow kernela 2.4.22 z debiana to: asgard:~# ipsec setup --start ipsec_setup: Starting FreeS/WAN IPsec 2.03... ipsec_setup: /sbin/insmod -q /lib/modules/2.4.22-17mar2004v6/kernel/net/ipv4/ah4 .o ipsec_setup: Using /lib/modules/2.4.22-17mar2004v6/kernel/net/ipv4/ah4.o ipsec_setup: Symbol version prefix 'smp_' ipsec_setup: /lib/modules/2.4.22-17mar2004v6/kernel/net/ipv4/ah4.o: init_module: Resource temporarily unavailable ipsec_setup: /lib/modules/2.4.22-17mar2004v6/kernel/net/ipv4/ah4.o: insmod ah4 f ailed ipsec_setup: Hint: insmod errors can be caused by incorrect module parameters, i ncluding invalid IO or IRQ parameters ipsec_setup: /sbin/insmod -q /lib/modules/2.4.22-17mar2004v6/kernel/net/ipv4/esp 4.o ipsec_setup: Using /lib/modules/2.4.22-17mar2004v6/kernel/net/ipv4/esp4.o ipsec_setup: Symbol version prefix 'smp_' ipsec_setup: /lib/modules/2.4.22-17mar2004v6/kernel/net/ipv4/esp4.o: init_module : Resource temporarily unavailable ipsec_setup: /lib/modules/2.4.22-17mar2004v6/kernel/net/ipv4/esp4.o: insmod esp4 failed ipsec_setup: Hint: insmod errors can be caused by incorrect module parameters, i ncluding invalid IO or IRQ parameters ipsec_setup: /sbin/insmod -q /lib/modules/2.4.22-17mar2004v6/kernel/net/ipv4/ipc omp.o ipsec_setup: Using /lib/modules/2.4.22-17mar2004v6/kernel/net/ipv4/ipcomp.o ipsec_setup: Symbol version prefix 'smp_' ipsec_setup: /sbin/insmod -q /lib/modules/2.4.22-17mar2004v6/kernel/net/xfrm/xfr m_user.o ipsec_setup: Using /lib/modules/2.4.22-17mar2004v6/kernel/net/xfrm/xfrm_user.o ipsec_setup: Symbol version prefix 'smp_' ipsec_setup: WARNING: setkey not found. asgard:~# natomiast gdy uzywam sourcow z kernel.org (ta sama wersja) to dostaje takie bledy przy buildowaniu z freeswanem: + '[' -x /root/bin/installkernel ']' + '[' -x /sbin/installkernel ']' + exec /sbin/installkernel 2.4.22-17mar2004v5 bzImage /usr/src/linux-2.4.22/System.map '' In order to use the new kernel image you have just installed, you will need to reboot the machine. First, however, you will need to either make a bootable floppy diskette, re-run LILO, or have GRUB installed. Checking for LILO...Yes, on /dev/sda Should I run /sbin/lilo? (y/n) y Warning: LBA32 addressing assumed Added 2.4.22-install Added mobiltek * make[2]: Leaving directory `/usr/src/linux-2.4.22/arch/i386/boot' make[1]: Leaving directory `/usr/src/linux-2.4.22' packaging/utils/errcheck out.kinstall ***ERRORS DETECTED in out.kinstall (examine file for details): depmod: *** Unresolved symbols in /lib/modules/2.4.22-17mar2004v5/kernel/drivers/net/wan/comx.o make[1]: *** [_modinst_post] Error 1 make: *** [kinstall] Error 1 + '[' -x /root/bin/installkernel ']' + '[' -x /sbin/installkernel ']' + exec /sbin/installkernel 2.4.22-17mar2004v5 bzImage /usr/src/linux-2.4.22/System.map '' In order to use the new kernel image you have just installed, you will need to reboot the machine. First, however, you will need to either make a bootable floppy diskette, re-run LILO, or have GRUB installed. Checking for LILO...Yes, on /dev/sda Should I run /sbin/lilo? (y/n) y Warning: LBA32 addressing assumed Added 2.4.22-install Added mobiltek * make[2]: Leaving directory `/usr/src/linux-2.4.22/arch/i386/boot' make[1]: Leaving directory `/usr/src/linux-2.4.22' packaging/utils/errcheck out.kinstall ***ERRORS DETECTED in out.kinstall (examine file for details): depmod: *** Unresolved symbols in /lib/modules/2.4.22-17mar2004v5/kernel/drivers/net/wan/comx.o make[1]: *** [_modinst_post] Error 1 make: *** [kinstall] Error 1 i inne zabawne sytuacje sie pojawiaja Natomiast gdy uzywam lat freeswana z debiana albo mi sie nie chce kompilowac kernel rowniez (jeszcze inny blad) albo udalo mi sie raz doprowadzic do sytuacji pozornego dzialania, ktora i tak wydaje sie ze w koncu nie dziala i co chwile sieje do logow jakimis bledami albo od freeswana albo od kernela (moduly) Czy ktos mial podobne klopoty z ipsec i moglby ewentualnie naprowadzic gdzie szukac bledu? Bo ja juz mam dosc po calodniowym googlowaniu :( -- Pozdrawiam, Dominik Juszczyk
kernel-patch-freeswan
czesc. Jestem bardzo początkujący i niebardzo wiem jak zainstalować patcha na jądro, by korzystać z freeswana. Czy mogę prosić o jakkieś sugestie. Mam jądro 2.4.18-bf2.4 Przemek Hoppe
Re: kernel-patch-freeswan
Przemysław Hoppe wrote: czesc. Jestem bardzo początkujący i niebardzo wiem jak zainstalować patcha na jądro, by korzystać z freeswana. Czy mogę prosić o jakkieś sugestie. Mam jądro 2.4.18-bf2.4 No to tak. Zeby zainstalowac patcha musisz od nowa skompilowac jajko tzn.sciagnoac zrudla i skompilowac. Jezeli nie chce sie tobie konfigurowac to config od starego jajka znajdzesz w /boot (nazwa: config-wersja_jajka). Instrukcje jak skompilowac znajdzesz tu: http://www.debianusers.pl/article.php?aid=10top10=1 Tutaj masz tez jak spatchowac jajko Pozdrawaim [LocK] P.S. Odpowiedzi szukaj na google :P
Re: kernel-patch-freeswan
Dnia Mon, Jul 07, 2003 at 12:39:59PM +0200, [LocK] napisał(a): No to tak. Zeby zainstalowac patcha musisz od nowa skompilowac jajko tzn.sciagnoac zrudla i skompilowac. To zależy co rozumiesz przez instalację patch'a? Źródła jajka, czy jakiekolwiek inne patch'uje się przed ich kompilacją. man patch P.S. Odpowiedzi szukaj na google :P Pod tym się podpisuję. Pozdrawiam -- Rafal Czlonka e-mail/JID rafi[at]jabberpl.org
Re: kernel-patch-freeswan
Rafal Czlonka wrote: To zależy co rozumiesz przez instalację patch'a? Źródła jajka, czy jakiekolwiek inne patch'uje się przed ich kompilacją. man patch No najpierw zrudla pobrac, rozpakowac, skopiowac patch'a i wydac patch -p1, skonfigurowac jajko, skomilowac jajko ;] i to chyba wszystko :D. Jak by cos zle bylo to prosze poprawic =D P.S. Odpowiedzi szukaj na google :P Pod tym się podpisuję. Pozdrawiam
freeswan
Podczas instalacji pakietu freeswan okazuje sie, ze
moj kernel nie ma wsparcia freeswan.
Po wciagnieciu patcha
olimp:/home/miblasz# dpkg -i
kernel-patch-freeswan_1.96-1.2_all.deb(Reading database ... 25733 files and
directories currently installed.)Preparing to replace kernel-patch-freeswan
1.96-1.2 (using kernel-patch-freeswan_1.96-1.2_all.deb) ...Unpacking
replacement kernel-patch-freeswan ...Setting up kernel-patch-freeswan
(1.96-1.2) ...
i probie instalacji freeswan:
olimp:/home/miblasz# apt-get install
freeswanReading Package Lists... DoneBuilding Dependency Tree...
DoneSorry, freeswan is already the newest version.0 packages upgraded, 0
newly installed, 0 to remove and 0 not upgraded.1 packages not fully
installed or removed.Need to get 0B of archives. After unpacking 0B will be
used.Setting up freeswan (1.96-1.2) ...Kernel support for IPSec not
found, aborting.Using configuration from /usr/lib/ssl/openssl.cnfUnable
to load config infoGenerating a 1024 bit RSA private
key.++++writing new private
key to '/etc/ipsec.d/private/olimpKey.pem'-unable to find
'distinguished_name' in configproblems making Certificate
Request1382:error:0E06D06A:configuration file routines:NCONF_get_string:no
conf or environment
variable:conf_lib.c:343:1382:error:0E06D06A:configuration file
routines:NCONF_get_string:no conf or environment
variable:conf_lib.c:343:1382:error:0E06D06A:configuration file
routines:NCONF_get_string:no conf or environment
variable:conf_lib.c:343:1382:error:0E06D06A:configuration file
routines:NCONF_get_string:no conf or environment
variable:conf_lib.c:343:1382:error:0E06D06A:configuration file
routines:NCONF_get_string:no conf or environment
variable:conf_lib.c:343:1382:error:0E06D06A:configuration file
routines:NCONF_get_string:no conf or environment
variable:conf_lib.c:343:1382:error:0E06D06A:configuration file
routines:NCONF_get_string:no conf or environment
variable:conf_lib.c:343:1382:error:0E06D06A:configuration file
routines:NCONF_get_string:no conf or environment
variable:conf_lib.c:343:1382:error:0E06D06A:configuration file
routines:NCONF_get_string:no conf or environment
variable:conf_lib.c:343:1382:error:0E06D06A:configuration file
routines:NCONF_get_string:no conf or environment
variable:conf_lib.c:343:1382:error:0E06D06A:configuration file
routines:NCONF_get_string:no conf or environment
variable:conf_lib.c:343:1382:error:0E06D06A:configuration file
routines:NCONF_get_string:no conf or environment
variable:conf_lib.c:343:
/etc/ipsec.d/olimpCert.pem: No such file or
directoryunable to load certificate1383:error:02001002:system
library:fopen:No such file or
directory:bss_file.c:245:fopen('/etc/ipsec.d/olimpCert.pem','r')1383:error:20074002:BIO
routines:FILE_CTRL:system lib:bss_file.c:247:dpkg: error processing freeswan
(--configure):subprocess post-installation script returned error exit
status 1Errors were encountered while processing:freeswanE:
Sub-process /usr/bin/dpkg returned an error code (1)
w dalszym ciagu nie moge postawic FreeSWan.
Dlaczego?
pozdrawiam
miblasz
Re: freeswan
On Tue, 1 Oct 2002 19:07:02 +0200 Michał Błaszczyszyn [EMAIL PROTECTED] wrote: olimp:/home/miblasz# dpkg -i kernel-patch-freeswan_1.96-1.2_all.deb (Reading database ... 25733 files and directories currently installed.) Preparing to replace kernel-patch-freeswan 1.96-1.2 (using kernel-patch-freeswan_1.96-1.2_all.deb) ... Unpacking replacement kernel-patch-freeswan ... Setting up kernel-patch-freeswan (1.96-1.2) polecam man make-kpkg i użyć do zrobienia paczek z kernelem make-kpkg automatycznie nałoży łatki, które masz /usr/src/kernel-patches ale przedtem exoprt PATCH_THE_KERNEL=YES (polecam dokumentację) -- pozdrawiam, JaspEr [EMAIL PROTECTED] UIN: 161771390
FreesWan
Witam Czy jest ktoś z doświadczeniem w konfiguracji FreesWan IPsec i jest chętny odpowiedzieć na kilka pytań dotyczących konfiga. Nie chcę tego robić na grupie bo jest masa logów które musiałbym prezesłać a to by mocno zaśmieciło. A góry dzięki admer -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
freeswan
Witam Prubuję skompilować pakiet freeswan poleceniam make menugo i otrzymuję taki błąd: bastion:/home/admer/freeswan-1.97# make menugo if test -f cvs.datemark ; \ then \ sed /^IPSECVERSION=xxx/s/xxx/` \ date -r cvs.datemark +cvs%Y%b%d_%H:%M:%S \ `/ Makefile.ver Makefile.ver$$ \ mv Makefile.ver$$ Makefile.ver ; \ rm -f cvs.datemark ; \ fi echo === out.kpatch echo `date` `cd /usr/src/linux ; pwd` out.kpatch make _patches2.2 out.kpatch make[1]: execvp: utils/patcher: Permission denied make[1]: *** [_patches2.2] Error 127 make: *** [patches] Error 2 bastion:/home/admer/freeswan-1.97# ma ktoś może jakiś pomysł? Z góry dzięki Pozdrawiam Adrian Merda -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: freeswan
On Wed, May 22, 2002 at 03:02:27PM +0200, Adrian Merda wrote: Prubuję skompilować pakiet freeswan poleceniam make menugo i otrzymuję taki błąd: [...] make[1]: execvp: utils/patcher: Permission denied chmod +x utils/patcher ? Marcin -- Marcin Owsiany [EMAIL PROTECTED] http://marcin.owsiany.pl/ GnuPG: 1024D/60F41216 FE67 DA2D 0ACA FC5E 3F75 D6F6 3A0D 8AA0 60F4 1216 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: freeswan
On Wed, 22 May 2002, Adrian Merda wrote: ; make _patches2.2 out.kpatch ; make[1]: execvp: utils/patcher: Permission denied ; make[1]: *** [_patches2.2] Error 127 ; make: *** [patches] Error 2 ; bastion:/home/admer/freeswan-1.97# ; ; ma ktoś może jakiś pomysł? b make[1]: execvp: utils/patcher: Permission denied /b chmod +x utils/patcher ? Zim -- .. Robert Jaroszuk - [EMAIL PROTECTED] . GCS/IT/O d? s: a-- C+++ ULB$ P+ L$ E--- W-- N+ w--- O- M- V- PS+ PE Y(+) PGP-(+++) t-- X- R tv-- b+ DI- D- h! !r ... Najznamienitszy wojownik wygrywa bez walki. (Sun Tzu). ... -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
