這回改到porting openswan的問題
在quick mode negotiate completed後要用netlink加sa到xfrm …
but出現以下問題(不能加入sa)...
kernel: 2.6.28.10
Openswan 2.4.12
| checking transid: 12 keylen: 16 auth: 1
| checking transid: 12 keylen: 16 auth: 2
"conn_psk" #2: ERROR: netlink response for Add SA esp.f44e8ed@172.21.33.70 included errno 93: Protocol not supported
003 "conn_psk" #2: ERROR: netlink response for Add SA esp.f44e8ed@172.21.33.70 included errno 93: Protocol not supported
| complete state transition with STF_INTERNAL_ERROR
032 "conn_psk" #2: STATE_QUICK_I1: internal error
| state transition function for STATE_QUICK_I1 had internal error
| next event EVENT_RETRANSMIT in 8 seconds for #2
pluto的程式在這裡加入sa (kernel_netlink.c) netlink_add_sa
kernel對應的應該是: (xfrm_user.c)xfrm_add_sa
但2.6應該是不用klips…
結論是…我少了一些module
insmod ./hmac.ko
沒有留言:
張貼留言