Re: PROTO_IPSEC_ESP SA not found (maybe expired)

On Sun, 15 Aug 2004, Philipp Snizek wrote:

(removed Philipp Snizek <[email protected]> from the reply, since its 
three nameservers seem to be down for me)

> I've changed from redhat 9 SuperFreeSwan 1.99.8 to suse 9.1 FreeSwan
> 2.05.

> I never have seen before the "PROTO_IPSEC_ESP SA(0x79b5f800) not found
> (maybe expired)" error message.
 
> installed newest StrongSwan 2.1.5 release. No change. So the problem
> is probably not deriving from FreeSwan/Strongswan but from a possibly
> broken SuSE Kernel 2.6.4-52.

Likely, Free/Swan 2.05 is not loading all the 2.6 kernel modules correctly.
Try this on the 2.6 machine :

modprobe -qv ah4
modprobe -qv esp4
modprobe -qv ipcomp
modprobe -qv xfrm_user

As an alternative, you can try and build Openswan for the SuSe machine.
(or wait a little bit and perhaps SuSe will have switched to Openswan)

Paul