Trying to build a replacement for an old Fedora 14 box that failed; same issue obseved when I tried FC16 and 17. Machine is Shuttle SX38P2 Pro with Q6700 CPU.
i. Installed from X86_64 install DVD; first attempt I chose custom install options - second attempt I just chose the default "graphical desktop" installation
ii. Installed OpenSWAN - succeeded
iii. Configured OpenSWAN with the settings that had been working on the dwad machine
iv. When I try 'ipsec verify' to check the status of the installation I see a number of errors.
Here's the output from 'ipsec verify':
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path [OK]
Linux Openswan U2.6.37/K(no kernel code presently loaded)
Checking for IPsec support in kernel [FAILED]
SAref kernel support [N/A]
Checking that pluto is running [FAILED]
whack: Pluto is not running (no "/var/run/pluto/pluto.ctl")
Checking for 'ip' command [OK]
Checking /bin/sh is not /bin/dash [OK]
Checking for 'iptables' command [OK]
Opportunistic Encryption Support [DISABLED]
To me this suggests that either:
i. I am missing some pre-requisite for OpenSWAN the was not picked up when I installed the package
or ii. The kernel (cureently I have 3.3.4-5.fc17.x86_64) genuinely doiesn't have IPSec support by default.
Would appreciate advice on how to get OpenSWAN working... Is it possibly a 64-bit thing (IIRC the dead machine was using a 32-bit installation as it was an old AMD Duron CPU).
If it is a kernel issue, I could try the 32-bit version instead of 64-bit as currently there is only 4GB RAM in the system (not that likely to need more...).
Richard Culpan - Artevea Digital Ltd.
---------- Post added at 11:35 AM ---------- Previous post was at 10:38 AM ----------
Problem solved: a silly newbie error...
The IPSec service wasn't set to start on boot; after manually starting the service things do now appear to be working