Subject: Re: Racoon
To: None <lmbeng@wkla.com>
From: Patrick Welche <prlw1@newn.cam.ac.uk>
List: tech-net
Date: 09/04/2001 15:15:06
On Tue, Sep 04, 2001 at 10:04:40AM -0400, lmbeng@wkla.com wrote:
> Hello,
>
> I'm trying to get racoon running for vpn services, running 1.5.1, racoon package racoon-20010418a, and openssl package openssl-0.9.6. When I start racoon I get,
>
> WARNING: pfkey.c:2055:pk_check alg(): compression algorithm cannot be checked.
> ERROR: isakmp.c:1270:isakmp_open(): failed to bind (addresss already in use).
>
> Can someone point me in the right direction?
> Thanks
> Mike
>
> Sorry if this should be on another list.
>
> T
% diff -u /usr/share/examples/racoon/racoon.conf.sample /etc/racoon/racoon.conf
--- /usr/share/examples/racoon/racoon.conf.sample Sat Jul 28 19:29:40 2001
+++ /etc/racoon/racoon.conf Wed Mar 7 11:37:12 2001
@@ -53,7 +53,8 @@
pfs_group 2;
lifetime time 12 hour ;
lifetime byte 50 MB ;
- encryption_algorithm 3des, cast128, blowfish, des, twofish, rijndael ;
+ encryption_algorithm 3des, cast128, blowfish, des, rijndael ;
+# got rid of twofish 7 Mar 2001 PW (apparently not supported)
authentication_algorithm hmac_sha1, hmac_md5 ;
compression_algorithm deflate ;
}
Hope this helps.. not obvious from the above that it is twofish that is the
prob, but I am running ipsec at the moment..
Cheers,
Patrick