[Swan] Installing klips

Antonio Scattolini antonio.scattolini at atpesercizio.it
Sun Mar 15 16:50:14 EET 2015

Hi, I have Debian Jessie, uname -a gives:
Linux fw 3.16.0-4-686-pae #1 SMP Debian 3.16.7-ckt7-1 (2015-03-01) i686
I tried to install libreswan with klips support using what is written in the
makefile or in the readme and readme.klips:
make module module_install programs install
I did it after an "export KERNELSRC=/usr/src/linux" where linux is a link to
/usr/src/linux-source-3.16 obtained after extraction of
linux-source-3.16.tar.xz plus some make oldconfig && make prepare (in
/usr/src/linux) plus some other make I did (in /usr/src/linux) to correct
errors of make module module_install (in libreswan directory).
However I obtain:
root at fw:~# ipsec verify
Verifying installed system and configuration files

Version check and ipsec on-path                         [OK]
Libreswan 3.12 (netkey) on 3.16.0-4-686-pae
Checking for IPsec support in kernel                    [OK]
 NETKEY: Testing XFRM related proc values
         ICMP default/send_redirects                    [OK]
         ICMP default/accept_redirects                  [OK]
         XFRM larval drop                               [OK]
Pluto ipsec.conf syntax                                 [OK]
Hardware random device                                  [N/A]
Two or more interfaces found, checking IP forwarding    [OK]
Checking rp_filter                                      [OK]
Checking that pluto is running                          [OK]
 Pluto listening for IKE on udp 500                     [OK]
 Pluto listening for IKE/NAT-T on udp 4500              [OK]
 Pluto ipsec.secret syntax                              [OK]
Checking 'ip' command                                   [OK]
Checking 'iptables' command                             [OK]
Checking 'prelink' command does not interfere with FIPSChecking for obsolete
ipsec.conf options                 [OK]
Opportunistic Encryption                                [DISABLED]

What can I do to have klips?

Antonio Scattolini

More information about the Swan mailing list