Difference between revisions of "User:Svend Erik Høst"

From BubbaWiki
Jump to navigation Jump to search
 
Line 1: Line 1:
<br>
= Make Strongswan start on a b3 =


Login as root :<br># su -
Login as root :
<pre>
# su -</pre>
Install build utils&nbsp;:
<pre>
# aptitude install devscripts build-essential lsb-release libncurses-dev</pre>
Lets try to install Strongswan
<pre>
# aptitude install strongswan</pre>
You will see that strongswan has problems detecting the IPsec stack&nbsp;:
<pre>no netkey IPsec stack detected
no KLIPS IPsec stack detected
no known IPsec stack detected, ignoring!
Starting strongSwan 4.4.1 IPsec [starter]...
charon is already running (/var/run/charon.pid exists) -- skipping charon start
no netkey IPsec stack detected
no KLIPS IPsec stack detected
no known IPsec stack detected, ignoring!
starter is already running (/var/run/starter.pid exists) -- no fork done


Install build utils :<br># aptitude install devscripts build-essential lsb-release libncurses-dev


Install Strongswan<br># aptitude install strongswan
</pre>
Okay, now lets get the kernel&nbsp;:
<pre># uname -a
Linux b3 2.6.35.4 #5 Tue Sep 7 16:06:15 CEST 2010 armv5tel GNU/Linux
# cd /usr/src
# wget http://download.excito.net/kernel/Excito_B3/2.6.35.4/linux-2.6.35.4-excito.tar.bz2
# bzip2 -d linux-2.6.35.4-excito.tar.bz2
# tar -xvf linux-2.6.35.4-excito.tar
# cd linux-2.6.35.4


You will see that strongswan has problems detecting the IPsec stack :


no netkey IPsec stack detected<br>no KLIPS IPsec stack detected<br>no known IPsec stack detected, ignoring!<br>Starting strongSwan 4.4.1 IPsec [starter]...<br>charon is already running (/var/run/charon.pid exists) -- skipping charon start<br>no netkey IPsec stack detected<br>no KLIPS IPsec stack detected<br>no known IPsec stack detected, ignoring!<br>starter is already running (/var/run/starter.pid exists) -- no fork done
</pre>
Make a .config&nbsp;:
<pre># make bubba3_defconfig</pre>
Edit the config and enable the 2 modules missing&nbsp;:
<pre># nano .config
CONFIG_XFRM_USER=m
CONFIG_NET_KEY=m
</pre>
Save the .config file and make the modules&nbsp;:
<pre># make modules modules_install</pre>
If the make script prompts you for anything, just press Enter to accept the default choice.  


Okay, lets get the kernel :<br># uname -a<br>Linux b3 2.6.35.4 #5 Tue Sep 7 16:06:15 CEST 2010 armv5tel GNU/Linux<br># cd /usr/src<br># wget http://download.excito.net/kernel/Excito_B3/2.6.35.4/linux-2.6.35.4-excito.tar.bz2<br># bzip2 -d linux-2.6.35.4-excito.tar.bz2<br># tar -xvf linux-2.6.35.4-excito.tar<br># cd linux-2.6.35.4


Make a .config :<br># make bubba3_defconfig


Edit the config and enable the 2 modules missing :<br># nano .config<br>CONFIG_XFRM_USER=m<br>CONFIG_NET_KEY=m
Make the modules available for modprobe&nbsp;:
<pre># depmod -a</pre>


Save the .config file and make the modules :<br># make modules modules_install<br>If the make script prompts you for anything, just press Enter to accept the default choice.


Make the modules awaileble for modprobe :<br># depmod -a
Lets try to restart ipsec&nbsp;:
<pre># /etc/init.d/ipsec restart
Restarting strongswan IPsec services: ipsecStopping strongSwan IPsec...
Starting strongSwan 4.4.1 IPsec [starter]...
insmod /lib/modules/2.6.35.4/kernel/net/ipv4/ah4.ko
insmod /lib/modules/2.6.35.4/kernel/net/ipv4/esp4.ko
insmod /lib/modules/2.6.35.4/kernel/net/xfrm/xfrm_ipcomp.ko
insmod /lib/modules/2.6.35.4/kernel/net/ipv4/ipcomp.ko
insmod /lib/modules/2.6.35.4/kernel/net/ipv4/tunnel4.ko
insmod /lib/modules/2.6.35.4/kernel/net/ipv4/xfrm4_tunnel.ko


Lets try to restart ipsec :<br># /etc/init.d/ipsec restart<br>Restarting strongswan IPsec services: ipsecStopping strongSwan IPsec...<br>Starting strongSwan 4.4.1 IPsec [starter]...<br>insmod /lib/modules/2.6.35.4/kernel/net/ipv4/ah4.ko<br>insmod /lib/modules/2.6.35.4/kernel/net/ipv4/esp4.ko<br>insmod /lib/modules/2.6.35.4/kernel/net/xfrm/xfrm_ipcomp.ko<br>insmod /lib/modules/2.6.35.4/kernel/net/ipv4/ipcomp.ko<br>insmod /lib/modules/2.6.35.4/kernel/net/ipv4/tunnel4.ko<br>insmod /lib/modules/2.6.35.4/kernel/net/ipv4/xfrm4_tunnel.ko


Nice, it seems to work now.
</pre>
Nice, that seems to work now.

Latest revision as of 22:29, 9 December 2010

Make Strongswan start on a b3

Login as root :

# su -

Install build utils :

# aptitude install devscripts build-essential lsb-release libncurses-dev

Lets try to install Strongswan

# aptitude install strongswan

You will see that strongswan has problems detecting the IPsec stack :

no netkey IPsec stack detected
no KLIPS IPsec stack detected
no known IPsec stack detected, ignoring!
Starting strongSwan 4.4.1 IPsec [starter]...
charon is already running (/var/run/charon.pid exists) -- skipping charon start
no netkey IPsec stack detected
no KLIPS IPsec stack detected
no known IPsec stack detected, ignoring!
starter is already running (/var/run/starter.pid exists) -- no fork done


Okay, now lets get the kernel :

# uname -a
Linux b3 2.6.35.4 #5 Tue Sep 7 16:06:15 CEST 2010 armv5tel GNU/Linux
# cd /usr/src
# wget http://download.excito.net/kernel/Excito_B3/2.6.35.4/linux-2.6.35.4-excito.tar.bz2
# bzip2 -d linux-2.6.35.4-excito.tar.bz2
# tar -xvf linux-2.6.35.4-excito.tar
# cd linux-2.6.35.4


Make a .config :

# make bubba3_defconfig

Edit the config and enable the 2 modules missing :

# nano .config
CONFIG_XFRM_USER=m
CONFIG_NET_KEY=m

Save the .config file and make the modules :

# make modules modules_install

If the make script prompts you for anything, just press Enter to accept the default choice.


Make the modules available for modprobe :

# depmod -a


Lets try to restart ipsec :

# /etc/init.d/ipsec restart
Restarting strongswan IPsec services: ipsecStopping strongSwan IPsec...
Starting strongSwan 4.4.1 IPsec [starter]...
insmod /lib/modules/2.6.35.4/kernel/net/ipv4/ah4.ko
insmod /lib/modules/2.6.35.4/kernel/net/ipv4/esp4.ko
insmod /lib/modules/2.6.35.4/kernel/net/xfrm/xfrm_ipcomp.ko
insmod /lib/modules/2.6.35.4/kernel/net/ipv4/ipcomp.ko
insmod /lib/modules/2.6.35.4/kernel/net/ipv4/tunnel4.ko
insmod /lib/modules/2.6.35.4/kernel/net/ipv4/xfrm4_tunnel.ko


Nice, that seems to work now.