[Swan] Installing Libreswan on Debian 7.7 Wheezy

Mon Nov 24 22:15:40 EET 2014

On Fri, 21 Nov 2014, Sahal Ansari wrote:

> I've been installing Libreswan on Debian 7.7 Wheezy 64bit VPSes lately but the post-install script _always_ crashes on first
> launch. I always chose not to generate X.509 certificates.
> 
> Breaking out of the post-install script via CTRL+C and then using dpkg to (re)configure Libreswan works well, but I'm not sure
> why it crashes in the first place.

It looks likes the kernel's buildin selftest for crypto is failing on a
compress algorithm test? Probably the reason it works for the second
time is that the module is already loaded, so it does not trigger a new
selftest ?

This is really something inside the kernel itself. We might be
triggering it by loading kernel modules, but it is not our code doing
anything bad (as far as I understand the below oops, I don't think you
are trying to use klips (ipsec.ko))

Paul

> ### Installing libreswan ------------------------------
> 
> # wget --no-clobber https://download.libreswan.org/binaries/debian/wheezy/libreswan_3.12~3-gdd6f200-deb_amd64.deb
> # dpkg -i libreswan_3.12~3-gdd6f200-deb_amd64.deb
> 
> Selecting previously unselected package libreswan.
> (Reading database ... 26559 files and directories currently installed.)
> Unpacking libreswan (from libreswan_3.12~3-gdd6f200-deb_amd64.deb) ...
> Setting up libreswan (1:3.12~3-gdd6f200-deb) ...
> Starting pluto IKE daemon for IPsec:
> Message from syslogd at london at Nov 21 20:04:40 ...
>  kernel:[  149.807066] Oops: 0000 [#1] SMP
> 
> Message from syslogd at london at Nov 21 20:04:40 ...
>  kernel:[  149.809376] Stack:
> 
> Message from syslogd at london at Nov 21 20:04:40 ...
>  kernel:[  149.809376] Call Trace:
> 
> Message from syslogd at london at Nov 21 20:04:40 ...
>  kernel:[  149.809376] Code: 4d 31 da 44 0f b6 5e 01 49 c1 e2 05 4d 31 da 44 0f b6 1e 49 c1 e2 05 4d 31 da 4d 6b fa 21 49 c1 ef
> 05 4c 89 fd 81 e5 ff 3f 00 00 <4d> 8b 14 e8 49 39 fa 72 6f 4c 39 d6 74 6a 49 89 f3 4d 29 d3 49
> 
> Message from syslogd at london at Nov 21 20:04:40 ...
>  kernel:[  149.809376] CR2: ffffc900001684a0
> ^Cdpkg: error processing libreswan (--install):
>  subprocess installed post-installation script was interrupted
> Processing triggers for man-db ...
> Errors were encountered while processing:
>  libreswan
> 
> ### dpkg configure ------------------------------
> 
> # dpkg --configure libreswan
> Setting up libreswan (1:3.12~3-gdd6f200-deb) ...
> Starting pluto IKE daemon for IPsec: .
> 
> ### kern.log (relevant lines) ------------------------------
> 
> Nov 21 20:04:40 london kernel: [  149.805601] BUG: unable to handle kernel paging request at ffffc900001684a0
> Nov 21 20:04:40 london kernel: [  149.806344] IP: [<ffffffff811bb6d2>] _lzo1x_1_do_compress+0x62/0x2fb
> Nov 21 20:04:40 london kernel: [  149.806615] PGD 1e011067 PUD 1e012067 PMD 1e013067 PTE 0
> Nov 21 20:04:40 london kernel: [  149.807066] Oops: 0000 [#1] SMP
> Nov 21 20:04:40 london kernel: [  149.807363] CPU 0
> Nov 21 20:04:40 london kernel: [  149.807468] Modules linked in: lzo(+) cast6 cast5 deflate zlib_deflate cts ctr gcm ccm
> serpent blowfish_generic blowfish_x86_64 blowfish_common twofish_generic twofish_x86_64_3way twofish_x86_64 twofish_common ecb
> xcbc cbc sha256_generic sha512_generic des_generic timeriomem_rng virtio_rng rng_core crc32c_intel ghash_clmulni_intel snd_pcm
> snd_page_alloc aesni_intel snd_timer virtio_balloon thermal_sys button evdev serio_raw aes_x86_64 snd soundcore pcspkr i2c_core
> aes_generic cryptd ext4 crc16 jbd2 mbcache ata_generic virtio_blk virtio_net floppy ata_piix libata uhci_hcd ehci_hcd usbcore
> usb_common virtio_pci virtio_ring virtio scsi_mod [last unloaded: scsi_wait_scan]
> Nov 21 20:04:40 london kernel: [  149.809376]
> Nov 21 20:04:40 london kernel: [  149.809376] Pid: 3224, comm: cryptomgr_test Not tainted 3.2.0-4-amd64 #1 Debian 3.2.54-2
> Bochs Bochs
> Nov 21 20:04:40 london kernel: [  149.809376] RIP: 0010:[<ffffffff811bb6d2>]  [<ffffffff811bb6d2>]
> _lzo1x_1_do_compress+0x62/0x2fb
> Nov 21 20:04:40 london kernel: [  149.809376] RSP: 0018:ffff88001c601b38  EFLAGS: 00010202
> Nov 21 20:04:40 london kernel: [  149.809376] RAX: ffffffff8163c75e RBX: ffffffff8163c718 RCX: ffff88001c601ba8
> Nov 21 20:04:40 london kernel: [  149.809376] RDX: ffff88001c601bd8 RSI: ffffffff8163c71c RDI: ffffffff8163c718
> Nov 21 20:04:40 london kernel: [  149.809376] RBP: 0000000000001094 R08: ffffc90000160000 R09: ffff88001c601bd8
> Nov 21 20:04:40 london kernel: [  149.809376] R10: 000000000021c280 R11: 0000000000000020 R12: ffffffff8163c751
> Nov 21 20:04:40 london kernel: [  149.809376] R13: ffffffff8163c720 R14: ffffffffa0264073 R15: 000000000022d094
> Nov 21 20:04:40 london kernel: [  149.809376] FS:  0000000000000000(0000) GS:ffff88001f200000(0000) knlGS:0000000000000000
> Nov 21 20:04:40 london kernel: [  149.809376] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
> Nov 21 20:04:40 london kernel: [  149.809376] CR2: ffffc900001684a0 CR3: 000000001f9bc000 CR4: 00000000001406f0
> Nov 21 20:04:40 london kernel: [  149.809376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> Nov 21 20:04:40 london kernel: [  149.809376] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
> Nov 21 20:04:40 london kernel: [  149.809376] Process cryptomgr_test (pid: 3224, threadinfo ffff88001c600000, task
> ffff88001fa62a30)
> Nov 21 20:04:40 london kernel: [  149.809376] Stack:
> Nov 21 20:04:40 london kernel: [  149.809376]  ffffffff8163c75e ffff88001c601bd8 0000000000000046 ffff88001c601ba8
> Nov 21 20:04:40 london kernel: [  149.809376]  ffffffff8163c718 ffffffffa0264078 ffff88001c601bd8 ffffffff811bb988
> Nov 21 20:04:40 london kernel: [  149.809376]  ffff88001c601bd4 ffff88001b86e7c0 ffffffff8163c710 00000000ffffffff
> Nov 21 20:04:40 london kernel: [  149.809376] Call Trace:
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff811bb988>] ? lzo1x_1_compress+0x1d/0xc9
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffffa0262097>] ? lzo_compress+0x2c/0x49 [lzo]
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81191a37>] ? test_comp+0x76/0x1ec
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81192501>] ? alg_test_comp+0x5d/0x79
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff811933a3>] ? alg_test+0x1ae/0x263
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8134ea11>] ? __schedule+0x5f9/0x610
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8119116d>] ? cryptomgr_probe+0xb5/0xb5
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8119118c>] ? cryptomgr_test+0x1f/0x3a
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8105f681>] ? kthread+0x76/0x7e
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81356ef4>] ? kernel_thread_helper+0x4/0x10
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8105f60b>] ? kthread_worker_fn+0x139/0x139
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81356ef0>] ? gs_change+0x13/0x13
> Nov 21 20:04:40 london kernel: [  149.809376] Code: 4d 31 da 44 0f b6 5e 01 49 c1 e2 05 4d 31 da 44 0f b6 1e 49 c1 e2 05 4d 31
> da 4d 6b fa 21 49 c1 ef 05 4c 89 fd 81 e5 ff 3f 00 00 <4d> 8b 14 e8 49 39 fa 72 6f 4c 39 d6 74 6a 49 89 f3 4d 29 d3 49
> Nov 21 20:04:40 london kernel: [  149.809376] RIP  [<ffffffff811bb6d2>] _lzo1x_1_do_compress+0x62/0x2fb
> Nov 21 20:04:40 london kernel: [  149.809376]  RSP <ffff88001c601b38>
> Nov 21 20:04:40 london kernel: [  149.809376] CR2: ffffc900001684a0
> Nov 21 20:04:40 london kernel: [  149.809376] ---[ end trace 1d69690ae901d285 ]---
> Nov 21 20:04:54 london kernel: [  164.018159] ------------[ cut here ]------------
> Nov 21 20:04:54 london kernel: [  164.020327] WARNING: at /build/linux-FpPMO6/linux-3.2.54/crypto/algapi.c:346
> crypto_wait_for_test+0x51/0x5a()
> Nov 21 20:04:54 london kernel: [  164.020883] Hardware name: Bochs
> Nov 21 20:04:54 london kernel: [  164.021157] Modules linked in: lzo(+) cast6 cast5 deflate zlib_deflate cts ctr gcm ccm
> serpent blowfish_generic blowfish_x86_64 blowfish_common twofish_generic twofish_x86_64_3way twofish_x86_64 twofish_common ecb
> xcbc cbc sha256_generic sha512_generic des_generic timeriomem_rng virtio_rng rng_core crc32c_intel ghash_clmulni_intel snd_pcm
> snd_page_alloc aesni_intel snd_timer virtio_balloon thermal_sys button evdev serio_raw aes_x86_64 snd soundcore pcspkr i2c_core
> aes_generic cryptd ext4 crc16 jbd2 mbcache ata_generic virtio_blk virtio_net floppy ata_piix libata uhci_hcd ehci_hcd usbcore
> usb_common virtio_pci virtio_ring virtio scsi_mod [last unloaded: scsi_wait_scan]
> Nov 21 20:04:54 london kernel: [  164.028044] Pid: 3223, comm: modprobe Tainted: G      D      3.2.0-4-amd64 #1 Debian 3.2.54-2
> Nov 21 20:04:54 london kernel: [  164.028573] Call Trace:
> Nov 21 20:04:54 london kernel: [  164.028832]  [<ffffffff81046cb5>] ? warn_slowpath_common+0x78/0x8c
> Nov 21 20:04:54 london kernel: [  164.029166]  [<ffffffff8118c9e7>] ? crypto_wait_for_test+0x51/0x5a
> Nov 21 20:04:54 london kernel: [  164.029499]  [<ffffffff8118cb54>] ? crypto_register_alg+0x49/0x51
> Nov 21 20:04:54 london kernel: [  164.029833]  [<ffffffffa002e000>] ? 0xffffffffa002dfff
> Nov 21 20:04:54 london kernel: [  164.030146]  [<ffffffff81002085>] ? do_one_initcall+0x75/0x12c
> Nov 21 20:04:54 london kernel: [  164.030495]  [<ffffffffa002e000>] ? 0xffffffffa002dfff
> Nov 21 20:04:54 london kernel: [  164.030806]  [<ffffffff81075929>] ? sys_init_module+0x10c/0x25b
> Nov 21 20:04:54 london kernel: [  164.031134]  [<ffffffff81354d92>] ? system_call_fastpath+0x16/0x1b
> Nov 21 20:04:54 london kernel: [  164.031463] ---[ end trace 1d69690ae901d286 ]---
> 
> ### syslog (relevant lines) ------------------------------
> 
> Nov 21 20:04:40 london kernel: [  149.805601] BUG: unable to handle kernel paging request at ffffc900001684a0
> Nov 21 20:04:40 london kernel: [  149.806344] IP: [<ffffffff811bb6d2>] _lzo1x_1_do_compress+0x62/0x2fb
> Nov 21 20:04:40 london kernel: [  149.806615] PGD 1e011067 PUD 1e012067 PMD 1e013067 PTE 0
> Nov 21 20:04:40 london kernel: [  149.807066] Oops: 0000 [#1] SMP
> Nov 21 20:04:40 london kernel: [  149.807363] CPU 0
> Nov 21 20:04:40 london kernel: [  149.807468] Modules linked in: lzo(+) cast6 cast5 deflate zlib_deflate cts ctr gcm ccm
> serpent blowfish_generic blowfish_x86_64 blowfish_common twofish_generic twofish_x86_64_3way twofish_x86_64 twofish_common ecb
> xcbc cbc sha256_generic sha512_generic des_generic timeriomem_rng virtio_rng rng_core crc32c_intel ghash_clmulni_intel snd_pcm
> snd_page_alloc aesni_intel snd_timer virtio_balloon thermal_sys button evdev serio_raw aes_x86_64 snd soundcore pcspkr i2c_core
> aes_generic cryptd ext4 crc16 jbd2 mbcache ata_generic virtio_blk virtio_net floppy ata_piix libata uhci_hcd ehci_hcd usbcore
> usb_common virtio_pci virtio_ring virtio scsi_mod [last unloaded: scsi_wait_scan]
> Nov 21 20:04:40 london kernel: [  149.809376]
> Nov 21 20:04:40 london kernel: [  149.809376] Pid: 3224, comm: cryptomgr_test Not tainted 3.2.0-4-amd64 #1 Debian 3.2.54-2
> Bochs Bochs
> Nov 21 20:04:40 london kernel: [  149.809376] RIP: 0010:[<ffffffff811bb6d2>]  [<ffffffff811bb6d2>]
> _lzo1x_1_do_compress+0x62/0x2fb
> Nov 21 20:04:40 london kernel: [  149.809376] RSP: 0018:ffff88001c601b38  EFLAGS: 00010202
> Nov 21 20:04:40 london kernel: [  149.809376] RAX: ffffffff8163c75e RBX: ffffffff8163c718 RCX: ffff88001c601ba8
> Nov 21 20:04:40 london kernel: [  149.809376] RDX: ffff88001c601bd8 RSI: ffffffff8163c71c RDI: ffffffff8163c718
> Nov 21 20:04:40 london kernel: [  149.809376] RBP: 0000000000001094 R08: ffffc90000160000 R09: ffff88001c601bd8
> Nov 21 20:04:40 london kernel: [  149.809376] R10: 000000000021c280 R11: 0000000000000020 R12: ffffffff8163c751
> Nov 21 20:04:40 london kernel: [  149.809376] R13: ffffffff8163c720 R14: ffffffffa0264073 R15: 000000000022d094
> Nov 21 20:04:40 london kernel: [  149.809376] FS:  0000000000000000(0000) GS:ffff88001f200000(0000) knlGS:0000000000000000
> Nov 21 20:04:40 london kernel: [  149.809376] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
> Nov 21 20:04:40 london kernel: [  149.809376] CR2: ffffc900001684a0 CR3: 000000001f9bc000 CR4: 00000000001406f0
> Nov 21 20:04:40 london kernel: [  149.809376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> Nov 21 20:04:40 london kernel: [  149.809376] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
> Nov 21 20:04:40 london kernel: [  149.809376] Process cryptomgr_test (pid: 3224, threadinfo ffff88001c600000, task
> ffff88001fa62a30)
> Nov 21 20:04:40 london kernel: [  149.809376] Stack:
> Nov 21 20:04:40 london kernel: [  149.809376]  ffffffff8163c75e ffff88001c601bd8 0000000000000046 ffff88001c601ba8
> Nov 21 20:04:40 london kernel: [  149.809376]  ffffffff8163c718 ffffffffa0264078 ffff88001c601bd8 ffffffff811bb988
> Nov 21 20:04:40 london kernel: [  149.809376]  ffff88001c601bd4 ffff88001b86e7c0 ffffffff8163c710 00000000ffffffff
> Nov 21 20:04:40 london kernel: [  149.809376] Call Trace:
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff811bb988>] ? lzo1x_1_compress+0x1d/0xc9
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffffa0262097>] ? lzo_compress+0x2c/0x49 [lzo]
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81191a37>] ? test_comp+0x76/0x1ec
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81192501>] ? alg_test_comp+0x5d/0x79
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff811933a3>] ? alg_test+0x1ae/0x263
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8134ea11>] ? __schedule+0x5f9/0x610
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8119116d>] ? cryptomgr_probe+0xb5/0xb5
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8119118c>] ? cryptomgr_test+0x1f/0x3a
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8105f681>] ? kthread+0x76/0x7e
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81356ef4>] ? kernel_thread_helper+0x4/0x10
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff8105f60b>] ? kthread_worker_fn+0x139/0x139
> Nov 21 20:04:40 london kernel: [  149.809376]  [<ffffffff81356ef0>] ? gs_change+0x13/0x13
> Nov 21 20:04:40 london kernel: [  149.809376] Code: 4d 31 da 44 0f b6 5e 01 49 c1 e2 05 4d 31 da 44 0f b6 1e 49 c1 e2 05 4d 31
> da 4d 6b fa 21 49 c1 ef 05 4c 89 fd 81 e5 ff 3f 00 00 <4d> 8b 14 e8 49 39 fa 72 6f 4c 39 d6 74 6a 49 89 f3 4d 29 d3 49
> Nov 21 20:04:40 london kernel: [  149.809376] RIP  [<ffffffff811bb6d2>] _lzo1x_1_do_compress+0x62/0x2fb
> Nov 21 20:04:40 london kernel: [  149.809376]  RSP <ffff88001c601b38>
> Nov 21 20:04:40 london kernel: [  149.809376] CR2: ffffc900001684a0
> Nov 21 20:04:40 london kernel: [  149.809376] ---[ end trace 1d69690ae901d285 ]---
> Nov 21 20:04:54 london kernel: [  164.018159] ------------[ cut here ]------------
> Nov 21 20:04:54 london kernel: [  164.020327] WARNING: at /build/linux-FpPMO6/linux-3.2.54/crypto/algapi.c:346
> crypto_wait_for_test+0x51/0x5a()
> Nov 21 20:04:54 london kernel: [  164.020883] Hardware name: Bochs
> Nov 21 20:04:54 london kernel: [  164.021157] Modules linked in: lzo(+) cast6 cast5 deflate zlib_deflate cts ctr gcm ccm
> serpent blowfish_generic blowfish_x86_64 blowfish_common twofish_generic twofish_x86_64_3way twofish_x86_64 twofish_common ecb
> xcbc cbc sha256_generic sha512_generic des_generic timeriomem_rng virtio_rng rng_core crc32c_intel ghash_clmulni_intel snd_pcm
> snd_page_alloc aesni_intel snd_timer virtio_balloon thermal_sys button evdev serio_raw aes_x86_64 snd soundcore pcspkr i2c_core
> aes_generic cryptd ext4 crc16 jbd2 mbcache ata_generic virtio_blk virtio_net floppy ata_piix libata uhci_hcd ehci_hcd usbcore
> usb_common virtio_pci virtio_ring virtio scsi_mod [last unloaded: scsi_wait_scan]
> Nov 21 20:04:54 london kernel: [  164.028044] Pid: 3223, comm: modprobe Tainted: G      D      3.2.0-4-amd64 #1 Debian 3.2.54-2
> Nov 21 20:04:54 london kernel: [  164.028573] Call Trace:
> Nov 21 20:04:54 london kernel: [  164.028832]  [<ffffffff81046cb5>] ? warn_slowpath_common+0x78/0x8c
> Nov 21 20:04:54 london kernel: [  164.029166]  [<ffffffff8118c9e7>] ? crypto_wait_for_test+0x51/0x5a
> Nov 21 20:04:54 london kernel: [  164.029499]  [<ffffffff8118cb54>] ? crypto_register_alg+0x49/0x51
> Nov 21 20:04:54 london kernel: [  164.029833]  [<ffffffffa002e000>] ? 0xffffffffa002dfff
> Nov 21 20:04:54 london kernel: [  164.030146]  [<ffffffff81002085>] ? do_one_initcall+0x75/0x12c
> Nov 21 20:04:54 london kernel: [  164.030495]  [<ffffffffa002e000>] ? 0xffffffffa002dfff
> Nov 21 20:04:54 london kernel: [  164.030806]  [<ffffffff81075929>] ? sys_init_module+0x10c/0x25b
> Nov 21 20:04:54 london kernel: [  164.031134]  [<ffffffff81354d92>] ? system_call_fastpath+0x16/0x1b
> Nov 21 20:04:54 london kernel: [  164.031463] ---[ end trace 1d69690ae901d286 ]---
> 
> 
> - Sahal
> 
>