On Fri, Jan 17, 2014 at 5:14 PM, Martin Willi <[email protected]> wrote:

> In the end you probably have to check what raises ENOENT in the XFRM
> subsystem to find out what effectively is going on.
>

After a bunch of printk's, and then finding out about this technique for
debugging module loading

http://digitalenginesoftware.com/blog/archives/67-Troubleshooting-OpenSwan-with-NETKEY.html

-q -- xfrm-mode-10-1
-q -- authenc(hmac(sha1),cbc(aes))
-q -- authenc(hmac(sha1),cbc(aes))-all
-q -- cbc(aes-generic)
-q -- cbc(aes-generic)-all
-q -- chainiv

It appears that the issue is a missing/broken chainiv kernel module.
 Unfortunately, when I pull it out of the kernel build dir, and manually
copy it to the machine and try to load it, I find that it's broken:

insmod: can't insert 'chainiv.ko': unknown symbol in module, or unknown
parameter

It depends on crypto_blkcipher, which is loaded, so further down the
rabbit-hole I go.

-Aaron
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to