LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
LinkBack Search this Thread
Old 11-22-2005, 09:20 AM   #1
Baracuda
Member
 
Registered: Aug 2002
Posts: 60

Rep: Reputation: 15
problem installing openswan


I just installed openswan on my redhat 9 using rpm. The install only had one warning:

warning: openswan-2.4.4-1.i386.rpm: V3 RSA/MD5 signature: NOKEY, key ID b5cc27e1

Following the instructions to test the install I entered:

service ipsec start

That returned:

bash: service: command not found

I went to service configuration to check if ipsec was active. It showed stopped so I selected to start the service. That brought me the message:

ipsec failed. The error was: ipsec_setup: Starting Openswan IPsec 2.4.4...
ipsec_setup: modprobe: Can't locate module ipsec
ipsec_setup: modprobe: Can't locate module af_key
ipsec_setup: modprobe: Can't locate module ipsec
ipsec_setup: kernel appears to lack IPsec support (neither CONFIG_KLIPS or CONFIG_NET_KEY are set)

How do I verify whether these modules are actually installed and what do I do from here?

Thanks
 
Old 11-24-2005, 04:46 PM   #2
bulliver
Senior Member
 
Registered: Nov 2002
Location: Edmonton AB, Canada
Distribution: Gentoo x86; Gentoo PPC; Gentoo Sparc64; FreeBSD; OS X; Solaris
Posts: 3,731
Blog Entries: 4

Rep: Reputation: 64
Looks like you need to recompile your kernel. CONFIG_NET_KEY is found under "Networking --> Networking Options --> PF_KEY sockets

I couldn't find CONFIG_KLIPS ion my linux-2.6.13 source. Maybe you can get by with just CONFIG_NET_KEY.

Also, I am not saying this is the solution to your problem, perhaps there is still more for you to do, but your error message makes it clear that ipsec needs this option in the kernel to work
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Openswan Evgeny Linux - Security 4 01-07-2010 11:43 AM
Openswan: STATE_QUICK_I1: initiate (NAT Problem?) havelino Linux - Networking 0 11-03-2005 11:04 AM
openswan Circuit Monkey Linux - Newbie 1 03-22-2005 02:30 PM
Openswan Evgeny Linux - Security 3 03-05-2005 03:59 AM
Installing openswan on Sarge Kernel 2.6.7 neptunus Debian 1 09-25-2004 03:53 AM


All times are GMT -5. The time now is 05:33 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration