[Swan] V3.5 and Kernel 3.9 modprobe ipsec failed

Lennart Sorensen lsorense at csclub.uwaterloo.ca
Mon Jul 15 16:53:44 EEST 2013


On Sun, Jul 14, 2013 at 10:24:58PM +0200, Sven Schiwek wrote:
> I installed Libreswan 3.5 on a Debian testing (jessie) environment and run into this problem:
> 
> [15:11] root pm-kvm01.test[17]:/home/sysop# modprobe ipsec
> [18705.100565] Protocol 50 is not namespace aware, cannot register.
> [18705.102096] KLIPS: can not register ESP protocol - recompile with CONFIG_INET_ESP disabled or as module
> ERROR: could not insert 'ipsec': Invalid argument
> 
> [15:12] root pm-kvm01.test[20]:/home/sysop# uname -a
> Linux pm-kvm01 3.9-1-amd64 #1 SMP Debian 3.9.8-1 x86_64 GNU/Linux

Based on the error, I would guess that klips' ESP module isn't compatible
with CONFIG_NET_NS.  Debian has that on in their kernels, given is is
very useful for things like lxc and other neat things.

Just a guess though.  I haven't bothered with klips for years.

-- 
Len Sorensen


More information about the Swan mailing list