[Swan] Installing Libreswan on Debian 7.7 Wheezy

Sahal Ansari me at sahal.info
Sat Nov 22 04:09:13 EET 2014


I've been installing Libreswan on Debian 7.7 Wheezy 64bit VPSes lately but
the post-install script _always_ crashes on first launch. I always chose
not to generate X.509 certificates.

Breaking out of the post-install script via CTRL+C and then using dpkg to
(re)configure Libreswan works well, but I'm not sure why it crashes in the
first place.

### Installing libreswan ------------------------------

# wget --no-clobber
https://download.libreswan.org/binaries/debian/wheezy/libreswan_3.12~3-gdd6f200-deb_amd64.deb
# dpkg -i libreswan_3.12~3-gdd6f200-deb_amd64.deb

Selecting previously unselected package libreswan.
(Reading database ... 26559 files and directories currently installed.)
Unpacking libreswan (from libreswan_3.12~3-gdd6f200-deb_amd64.deb) ...
Setting up libreswan (1:3.12~3-gdd6f200-deb) ...
Starting pluto IKE daemon for IPsec:
Message from syslogd at london at Nov 21 20:04:40 ...
 kernel:[  149.807066] Oops: 0000 [#1] SMP

Message from syslogd at london at Nov 21 20:04:40 ...
 kernel:[  149.809376] Stack:

Message from syslogd at london at Nov 21 20:04:40 ...
 kernel:[  149.809376] Call Trace:

Message from syslogd at london at Nov 21 20:04:40 ...
 kernel:[  149.809376] Code: 4d 31 da 44 0f b6 5e 01 49 c1 e2 05 4d 31 da
44 0f b6 1e 49 c1 e2 05 4d 31 da 4d 6b fa 21 49 c1 ef 05 4c 89 fd 81 e5 ff
3f 00 00 <4d> 8b 14 e8 49 39 fa 72 6f 4c 39 d6 74 6a 49 89 f3 4d 29 d3 49

Message from syslogd at london at Nov 21 20:04:40 ...
 kernel:[  149.809376] CR2: ffffc900001684a0
^Cdpkg: error processing libreswan (--install):
 subprocess installed post-installation script was interrupted
Processing triggers for man-db ...
Errors were encountered while processing:
 libreswan

### dpkg configure ------------------------------

# dpkg --configure libreswan
Setting up libreswan (1:3.12~3-gdd6f200-deb) ...
Starting pluto IKE daemon for IPsec: .

### kern.log (relevant lines) ------------------------------

Nov 21 20:04:40 london kernel: [  149.805601] BUG: unable to handle kernel
paging request at ffffc900001684a0
Nov 21 20:04:40 london kernel: [  149.806344] IP: [<ffffffff811bb6d2>]
_lzo1x_1_do_compress+0x62/0x2fb
Nov 21 20:04:40 london kernel: [  149.806615] PGD 1e011067 PUD 1e012067 PMD
1e013067 PTE 0
Nov 21 20:04:40 london kernel: [  149.807066] Oops: 0000 [#1] SMP
Nov 21 20:04:40 london kernel: [  149.807363] CPU 0
Nov 21 20:04:40 london kernel: [  149.807468] Modules linked in: lzo(+)
cast6 cast5 deflate zlib_deflate cts ctr gcm ccm serpent blowfish_generic
blowfish_x86_64 blowfish_common twofish_generic twofish_x86_64_3way
twofish_x86_64 twofish_common ecb xcbc cbc sha256_generic sha512_generic
des_generic timeriomem_rng virtio_rng rng_core crc32c_intel
ghash_clmulni_intel snd_pcm snd_page_alloc aesni_intel snd_timer
virtio_balloon thermal_sys button evdev serio_raw aes_x86_64 snd soundcore
pcspkr i2c_core aes_generic cryptd ext4 crc16 jbd2 mbcache ata_generic
virtio_blk virtio_net floppy ata_piix libata uhci_hcd ehci_hcd usbcore
usb_common virtio_pci virtio_ring virtio scsi_mod [last unloaded:
scsi_wait_scan]
Nov 21 20:04:40 london kernel: [  149.809376]
Nov 21 20:04:40 london kernel: [  149.809376] Pid: 3224, comm:
cryptomgr_test Not tainted 3.2.0-4-amd64 #1 Debian 3.2.54-2 Bochs Bochs
Nov 21 20:04:40 london kernel: [  149.809376] RIP:
0010:[<ffffffff811bb6d2>]  [<ffffffff811bb6d2>]
_lzo1x_1_do_compress+0x62/0x2fb
Nov 21 20:04:40 london kernel: [  149.809376] RSP: 0018:ffff88001c601b38
EFLAGS: 00010202
Nov 21 20:04:40 london kernel: [  149.809376] RAX: ffffffff8163c75e RBX:
ffffffff8163c718 RCX: ffff88001c601ba8
Nov 21 20:04:40 london kernel: [  149.809376] RDX: ffff88001c601bd8 RSI:
ffffffff8163c71c RDI: ffffffff8163c718
Nov 21 20:04:40 london kernel: [  149.809376] RBP: 0000000000001094 R08:
ffffc90000160000 R09: ffff88001c601bd8
Nov 21 20:04:40 london kernel: [  149.809376] R10: 000000000021c280 R11:
0000000000000020 R12: ffffffff8163c751
Nov 21 20:04:40 london kernel: [  149.809376] R13: ffffffff8163c720 R14:
ffffffffa0264073 R15: 000000000022d094
Nov 21 20:04:40 london kernel: [  149.809376] FS:  0000000000000000(0000)
GS:ffff88001f200000(0000) knlGS:0000000000000000
Nov 21 20:04:40 london kernel: [  149.809376] CS:  0010 DS: 0000 ES: 0000
CR0: 000000008005003b
Nov 21 20:04:40 london kernel: [  149.809376] CR2: ffffc900001684a0 CR3:
000000001f9bc000 CR4: 00000000001406f0
Nov 21 20:04:40 london kernel: [  149.809376] DR0: 0000000000000000 DR1:
0000000000000000 DR2: 0000000000000000
Nov 21 20:04:40 london kernel: [  149.809376] DR3: 0000000000000000 DR6:
00000000ffff0ff0 DR7: 0000000000000400
Nov 21 20:04:40 london kernel: [  149.809376] Process cryptomgr_test (pid:
3224, threadinfo ffff88001c600000, task ffff88001fa62a30)
Nov 21 20:04:40 london kernel: [  149.809376] Stack:
Nov 21 20:04:40 london kernel: [  149.809376]  ffffffff8163c75e
ffff88001c601bd8 0000000000000046 ffff88001c601ba8
Nov 21 20:04:40 london kernel: [  149.809376]  ffffffff8163c718
ffffffffa0264078 ffff88001c601bd8 ffffffff811bb988
Nov 21 20:04:40 london kernel: [  149.809376]  ffff88001c601bd4
ffff88001b86e7c0 ffffffff8163c710 00000000ffffffff
Nov 21 20:04:40 london kernel: [  149.809376] Call Trace:
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff811bb988>] ?
lzo1x_1_compress+0x1d/0xc9
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffffa0262097>] ?
lzo_compress+0x2c/0x49 [lzo]
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81191a37>] ?
test_comp+0x76/0x1ec
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81192501>] ?
alg_test_comp+0x5d/0x79
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff811933a3>] ?
alg_test+0x1ae/0x263
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8134ea11>] ?
__schedule+0x5f9/0x610
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8119116d>] ?
cryptomgr_probe+0xb5/0xb5
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8119118c>] ?
cryptomgr_test+0x1f/0x3a
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8105f681>] ?
kthread+0x76/0x7e
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81356ef4>] ?
kernel_thread_helper+0x4/0x10
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8105f60b>] ?
kthread_worker_fn+0x139/0x139
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81356ef0>] ?
gs_change+0x13/0x13
Nov 21 20:04:40 london kernel: [  149.809376] Code: 4d 31 da 44 0f b6 5e 01
49 c1 e2 05 4d 31 da 44 0f b6 1e 49 c1 e2 05 4d 31 da 4d 6b fa 21 49 c1 ef
05 4c 89 fd 81 e5 ff 3f 00 00 <4d> 8b 14 e8 49 39 fa 72 6f 4c 39 d6 74 6a
49 89 f3 4d 29 d3 49
Nov 21 20:04:40 london kernel: [  149.809376] RIP  [<ffffffff811bb6d2>]
_lzo1x_1_do_compress+0x62/0x2fb
Nov 21 20:04:40 london kernel: [  149.809376]  RSP <ffff88001c601b38>
Nov 21 20:04:40 london kernel: [  149.809376] CR2: ffffc900001684a0
Nov 21 20:04:40 london kernel: [  149.809376] ---[ end trace
1d69690ae901d285 ]---
Nov 21 20:04:54 london kernel: [  164.018159] ------------[ cut here
]------------
Nov 21 20:04:54 london kernel: [  164.020327] WARNING: at
/build/linux-FpPMO6/linux-3.2.54/crypto/algapi.c:346
crypto_wait_for_test+0x51/0x5a()
Nov 21 20:04:54 london kernel: [  164.020883] Hardware name: Bochs
Nov 21 20:04:54 london kernel: [  164.021157] Modules linked in: lzo(+)
cast6 cast5 deflate zlib_deflate cts ctr gcm ccm serpent blowfish_generic
blowfish_x86_64 blowfish_common twofish_generic twofish_x86_64_3way
twofish_x86_64 twofish_common ecb xcbc cbc sha256_generic sha512_generic
des_generic timeriomem_rng virtio_rng rng_core crc32c_intel
ghash_clmulni_intel snd_pcm snd_page_alloc aesni_intel snd_timer
virtio_balloon thermal_sys button evdev serio_raw aes_x86_64 snd soundcore
pcspkr i2c_core aes_generic cryptd ext4 crc16 jbd2 mbcache ata_generic
virtio_blk virtio_net floppy ata_piix libata uhci_hcd ehci_hcd usbcore
usb_common virtio_pci virtio_ring virtio scsi_mod [last unloaded:
scsi_wait_scan]
Nov 21 20:04:54 london kernel: [  164.028044] Pid: 3223, comm: modprobe
Tainted: G      D      3.2.0-4-amd64 #1 Debian 3.2.54-2
Nov 21 20:04:54 london kernel: [  164.028573] Call Trace:
Nov 21 20:04:54 london kernel: [  164.028832]  [<ffffffff81046cb5>] ?
warn_slowpath_common+0x78/0x8c
Nov 21 20:04:54 london kernel: [  164.029166]  [<ffffffff8118c9e7>] ?
crypto_wait_for_test+0x51/0x5a
Nov 21 20:04:54 london kernel: [  164.029499]  [<ffffffff8118cb54>] ?
crypto_register_alg+0x49/0x51
Nov 21 20:04:54 london kernel: [  164.029833]  [<ffffffffa002e000>] ?
0xffffffffa002dfff
Nov 21 20:04:54 london kernel: [  164.030146]  [<ffffffff81002085>] ?
do_one_initcall+0x75/0x12c
Nov 21 20:04:54 london kernel: [  164.030495]  [<ffffffffa002e000>] ?
0xffffffffa002dfff
Nov 21 20:04:54 london kernel: [  164.030806]  [<ffffffff81075929>] ?
sys_init_module+0x10c/0x25b
Nov 21 20:04:54 london kernel: [  164.031134]  [<ffffffff81354d92>] ?
system_call_fastpath+0x16/0x1b
Nov 21 20:04:54 london kernel: [  164.031463] ---[ end trace
1d69690ae901d286 ]---

### syslog (relevant lines) ------------------------------

Nov 21 20:04:40 london kernel: [  149.805601] BUG: unable to handle kernel
paging request at ffffc900001684a0
Nov 21 20:04:40 london kernel: [  149.806344] IP: [<ffffffff811bb6d2>]
_lzo1x_1_do_compress+0x62/0x2fb
Nov 21 20:04:40 london kernel: [  149.806615] PGD 1e011067 PUD 1e012067 PMD
1e013067 PTE 0
Nov 21 20:04:40 london kernel: [  149.807066] Oops: 0000 [#1] SMP
Nov 21 20:04:40 london kernel: [  149.807363] CPU 0
Nov 21 20:04:40 london kernel: [  149.807468] Modules linked in: lzo(+)
cast6 cast5 deflate zlib_deflate cts ctr gcm ccm serpent blowfish_generic
blowfish_x86_64 blowfish_common twofish_generic twofish_x86_64_3way
twofish_x86_64 twofish_common ecb xcbc cbc sha256_generic sha512_generic
des_generic timeriomem_rng virtio_rng rng_core crc32c_intel
ghash_clmulni_intel snd_pcm snd_page_alloc aesni_intel snd_timer
virtio_balloon thermal_sys button evdev serio_raw aes_x86_64 snd soundcore
pcspkr i2c_core aes_generic cryptd ext4 crc16 jbd2 mbcache ata_generic
virtio_blk virtio_net floppy ata_piix libata uhci_hcd ehci_hcd usbcore
usb_common virtio_pci virtio_ring virtio scsi_mod [last unloaded:
scsi_wait_scan]
Nov 21 20:04:40 london kernel: [  149.809376]
Nov 21 20:04:40 london kernel: [  149.809376] Pid: 3224, comm:
cryptomgr_test Not tainted 3.2.0-4-amd64 #1 Debian 3.2.54-2 Bochs Bochs
Nov 21 20:04:40 london kernel: [  149.809376] RIP:
0010:[<ffffffff811bb6d2>]  [<ffffffff811bb6d2>]
_lzo1x_1_do_compress+0x62/0x2fb
Nov 21 20:04:40 london kernel: [  149.809376] RSP: 0018:ffff88001c601b38
EFLAGS: 00010202
Nov 21 20:04:40 london kernel: [  149.809376] RAX: ffffffff8163c75e RBX:
ffffffff8163c718 RCX: ffff88001c601ba8
Nov 21 20:04:40 london kernel: [  149.809376] RDX: ffff88001c601bd8 RSI:
ffffffff8163c71c RDI: ffffffff8163c718
Nov 21 20:04:40 london kernel: [  149.809376] RBP: 0000000000001094 R08:
ffffc90000160000 R09: ffff88001c601bd8
Nov 21 20:04:40 london kernel: [  149.809376] R10: 000000000021c280 R11:
0000000000000020 R12: ffffffff8163c751
Nov 21 20:04:40 london kernel: [  149.809376] R13: ffffffff8163c720 R14:
ffffffffa0264073 R15: 000000000022d094
Nov 21 20:04:40 london kernel: [  149.809376] FS:  0000000000000000(0000)
GS:ffff88001f200000(0000) knlGS:0000000000000000
Nov 21 20:04:40 london kernel: [  149.809376] CS:  0010 DS: 0000 ES: 0000
CR0: 000000008005003b
Nov 21 20:04:40 london kernel: [  149.809376] CR2: ffffc900001684a0 CR3:
000000001f9bc000 CR4: 00000000001406f0
Nov 21 20:04:40 london kernel: [  149.809376] DR0: 0000000000000000 DR1:
0000000000000000 DR2: 0000000000000000
Nov 21 20:04:40 london kernel: [  149.809376] DR3: 0000000000000000 DR6:
00000000ffff0ff0 DR7: 0000000000000400
Nov 21 20:04:40 london kernel: [  149.809376] Process cryptomgr_test (pid:
3224, threadinfo ffff88001c600000, task ffff88001fa62a30)
Nov 21 20:04:40 london kernel: [  149.809376] Stack:
Nov 21 20:04:40 london kernel: [  149.809376]  ffffffff8163c75e
ffff88001c601bd8 0000000000000046 ffff88001c601ba8
Nov 21 20:04:40 london kernel: [  149.809376]  ffffffff8163c718
ffffffffa0264078 ffff88001c601bd8 ffffffff811bb988
Nov 21 20:04:40 london kernel: [  149.809376]  ffff88001c601bd4
ffff88001b86e7c0 ffffffff8163c710 00000000ffffffff
Nov 21 20:04:40 london kernel: [  149.809376] Call Trace:
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff811bb988>] ?
lzo1x_1_compress+0x1d/0xc9
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffffa0262097>] ?
lzo_compress+0x2c/0x49 [lzo]
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81191a37>] ?
test_comp+0x76/0x1ec
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81192501>] ?
alg_test_comp+0x5d/0x79
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff811933a3>] ?
alg_test+0x1ae/0x263
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8134ea11>] ?
__schedule+0x5f9/0x610
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8119116d>] ?
cryptomgr_probe+0xb5/0xb5
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8119118c>] ?
cryptomgr_test+0x1f/0x3a
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8105f681>] ?
kthread+0x76/0x7e
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81356ef4>] ?
kernel_thread_helper+0x4/0x10
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8105f60b>] ?
kthread_worker_fn+0x139/0x139
Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81356ef0>] ?
gs_change+0x13/0x13
Nov 21 20:04:40 london kernel: [  149.809376] Code: 4d 31 da 44 0f b6 5e 01
49 c1 e2 05 4d 31 da 44 0f b6 1e 49 c1 e2 05 4d 31 da 4d 6b fa 21 49 c1 ef
05 4c 89 fd 81 e5 ff 3f 00 00 <4d> 8b 14 e8 49 39 fa 72 6f 4c 39 d6 74 6a
49 89 f3 4d 29 d3 49
Nov 21 20:04:40 london kernel: [  149.809376] RIP  [<ffffffff811bb6d2>]
_lzo1x_1_do_compress+0x62/0x2fb
Nov 21 20:04:40 london kernel: [  149.809376]  RSP <ffff88001c601b38>
Nov 21 20:04:40 london kernel: [  149.809376] CR2: ffffc900001684a0
Nov 21 20:04:40 london kernel: [  149.809376] ---[ end trace
1d69690ae901d285 ]---
Nov 21 20:04:54 london kernel: [  164.018159] ------------[ cut here
]------------
Nov 21 20:04:54 london kernel: [  164.020327] WARNING: at
/build/linux-FpPMO6/linux-3.2.54/crypto/algapi.c:346
crypto_wait_for_test+0x51/0x5a()
Nov 21 20:04:54 london kernel: [  164.020883] Hardware name: Bochs
Nov 21 20:04:54 london kernel: [  164.021157] Modules linked in: lzo(+)
cast6 cast5 deflate zlib_deflate cts ctr gcm ccm serpent blowfish_generic
blowfish_x86_64 blowfish_common twofish_generic twofish_x86_64_3way
twofish_x86_64 twofish_common ecb xcbc cbc sha256_generic sha512_generic
des_generic timeriomem_rng virtio_rng rng_core crc32c_intel
ghash_clmulni_intel snd_pcm snd_page_alloc aesni_intel snd_timer
virtio_balloon thermal_sys button evdev serio_raw aes_x86_64 snd soundcore
pcspkr i2c_core aes_generic cryptd ext4 crc16 jbd2 mbcache ata_generic
virtio_blk virtio_net floppy ata_piix libata uhci_hcd ehci_hcd usbcore
usb_common virtio_pci virtio_ring virtio scsi_mod [last unloaded:
scsi_wait_scan]
Nov 21 20:04:54 london kernel: [  164.028044] Pid: 3223, comm: modprobe
Tainted: G      D      3.2.0-4-amd64 #1 Debian 3.2.54-2
Nov 21 20:04:54 london kernel: [  164.028573] Call Trace:
Nov 21 20:04:54 london kernel: [  164.028832]  [<ffffffff81046cb5>] ?
warn_slowpath_common+0x78/0x8c
Nov 21 20:04:54 london kernel: [  164.029166]  [<ffffffff8118c9e7>] ?
crypto_wait_for_test+0x51/0x5a
Nov 21 20:04:54 london kernel: [  164.029499]  [<ffffffff8118cb54>] ?
crypto_register_alg+0x49/0x51
Nov 21 20:04:54 london kernel: [  164.029833]  [<ffffffffa002e000>] ?
0xffffffffa002dfff
Nov 21 20:04:54 london kernel: [  164.030146]  [<ffffffff81002085>] ?
do_one_initcall+0x75/0x12c
Nov 21 20:04:54 london kernel: [  164.030495]  [<ffffffffa002e000>] ?
0xffffffffa002dfff
Nov 21 20:04:54 london kernel: [  164.030806]  [<ffffffff81075929>] ?
sys_init_module+0x10c/0x25b
Nov 21 20:04:54 london kernel: [  164.031134]  [<ffffffff81354d92>] ?
system_call_fastpath+0x16/0x1b
Nov 21 20:04:54 london kernel: [  164.031463] ---[ end trace
1d69690ae901d286 ]---


- Sahal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20141121/06ddcde0/attachment-0001.html>


More information about the Swan mailing list