ipsec-tools-devel — Development discussion of IPsec Tools

[Ipsec-tools-devel] Use of ipsec library

[DHARMENDRA P. <dha...@gm...>]

Hi,

I want to use ipsec library but unable use it.

I am using it as follows:

        char *sadb_in, *sadb_out;
        char *policy_in = "in ipsec esp/transport//require
ah/transport//require";
        char *policy_out = "out ipsec esp/transport//require
ah/transport//require";

        sadb_in = ipsec_set_policy(policy_in, strlen(policy_in));
        sadb_out = ipsec_set_policy(policy_in, strlen(policy_out));

        ------
        ------

    sd = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP);
    if( sd < 0 )
    {
        perror("socket");
        exit(1);
    }
    ret_val= setsockopt(sd,SOL_SOCKET,\
                                    SO_REUSEADDR,(char*)(&on),sizeof(int));
    ret_val= setsockopt(sd, IPPROTO_IP, IP_IPSEC_POLICY, sadb_in,
ipsec_get_policylen(sadb_in));
    ret_val= setsockopt(sd, IPPROTO_IP, IP_IPSEC_POLICY, sadb_out,
ipsec_get_policylen(sadb_out));


But my server is not accepting any request from the client.(without ipsec
my client server is working fine).

Please let me know what I am doing wrong, also if possible please share
ipsec enabled client server code snippet.


Thanks & Regards,
Dharmendra

Re: [Ipsec-tools-devel] failed to recv from pfkey on ipsec-tools-0.7.2

[Rainer W. <rwe...@mo...>]

"Ozai" <oza...@gm...> writes:
> Hi Sirs,
>
>  Do you have any suggestion on this question?thank's.

I suggested that you should provide the necessary information for
helping you with this problem (that was the "Run the daemon
with debug logging enabled". Provide the relevant part of the
output."). For as long as you didn't do that, any complaints you send to
this list are about as useful as writing them down on a piece of paper
and digging that into the earth somewhere.

Re: [Ipsec-tools-devel] failed to recv from pfkey on ipsec-tools-0.7.2

[Ozai <oza...@gm...>]

Hi Sirs,

 Do you have any suggestion on this question?thank's.

 Best Regards,
Ozai

----- Original Message ----- 
From: "Ozai" <oza...@gm...>
To: <ips...@li...>
Sent: Monday, September 09, 2013 10:01 AM
Subject: Re: [Ipsec-tools-devel] failed to recv from pfkey on 
ipsec-tools-0.7.2


> Hi Sirs,
>
> You mean I can ignore this message??But sometime I started the IPSec,I 
> could receive this message then IPSec seem to be frozen and can not 
> work.How do I check this question?thank's.
>
> Best Regards,
> Ozai
>
>> Date: Fri, 06 Sep 2013 16:24:41 +0100
>> From: Rainer Weikusat <rwe...@mo...>
>> Subject: Re: [Ipsec-tools-devel] failed to recv from pfkey on
>> ipsec-tools-0.7.2
>> To: <ips...@li...>
>> Message-ID: <87w...@sa...>
>> Content-Type: text/plain; charset=us-ascii
>>
>> "Ozai" <oza...@gm...> writes:
>>> When I try the ipsec-tools-0.7.2,I got the messgae
>>> racoon: ERROR: failed to recv from pfkey (Resource temporarily 
>>> unavailable) and racoon does not reolad.
>>>
>>> DO you have any idea on this question?Thank's.
>>
>> I figure this must be sort-of a cultural taboo but: "Run the daemon
>> with debug logging enabled". Provide the relevant part of the output.
>>
>> NB: EAGAIN aka 'resource temporarily unavailable' is usually not an
>> error, it just means 'no input was available at this time'.
>>
>>
> 

Re: [Ipsec-tools-devel] failed to recv from pfkey on ipsec-tools-0.7.2

[Ozai <oza...@gm...>]

Hi Sirs,

You mean I can ignore this message??But sometime I started the IPSec,I could 
receive this message then IPSec seem to be frozen and can not work.How do I 
check this question?thank's.

Best Regards,
Ozai

> Date: Fri, 06 Sep 2013 16:24:41 +0100
> From: Rainer Weikusat <rwe...@mo...>
> Subject: Re: [Ipsec-tools-devel] failed to recv from pfkey on
> ipsec-tools-0.7.2
> To: <ips...@li...>
> Message-ID: <87w...@sa...>
> Content-Type: text/plain; charset=us-ascii
>
> "Ozai" <oza...@gm...> writes:
>> When I try the ipsec-tools-0.7.2,I got the messgae
>> racoon: ERROR: failed to recv from pfkey (Resource temporarily 
>> unavailable) and racoon does not reolad.
>>
>> DO you have any idea on this question?Thank's.
>
> I figure this must be sort-of a cultural taboo but: "Run the daemon
> with debug logging enabled". Provide the relevant part of the output.
>
> NB: EAGAIN aka 'resource temporarily unavailable' is usually not an
> error, it just means 'no input was available at this time'.
>
>

Re: [Ipsec-tools-devel] failed to recv from pfkey on ipsec-tools-0.7.2

[Rainer W. <rwe...@mo...>]

"Ozai" <oza...@gm...> writes:
> When I try the ipsec-tools-0.7.2,I got the messgae
> racoon: ERROR: failed to recv from pfkey (Resource temporarily unavailable) and racoon does not reolad.
>
> DO you have any idea on this question?Thank's.

I figure this must be sort-of a cultural taboo but: "Run the daemon
with debug logging enabled". Provide the relevant part of the output.

NB: EAGAIN aka 'resource temporarily unavailable' is usually not an
error, it just means 'no input was available at this time'.

[Ipsec-tools-devel] failed to recv from pfkey on ipsec-tools-0.7.2

[Ozai <oza...@gm...>]

Hi Sirs,

When I try the ipsec-tools-0.7.2,I got the messgae
racoon: ERROR: failed to recv from pfkey (Resource temporarily unavailable) and racoon does not reolad.

DO you have any idea on this question?Thank's.


Best Regards,
Ozai

[Ipsec-tools-devel] failed to recv from pfkey on ipsec-tools-0.7.2

[Ozai <oza...@gm...>]

Hi Sirs,

When I try the ipsec-tools-0.7.2,I got the messgae
racoon: ERROR: failed to recv from pfkey (Resource temporarily unavailable) and racoon does not reolad.

DO you have any idea on this question?Thank's.


Best Regards,
Ozai