[FS#561] CAAM error in logs, issue or not?

LEDE Bugs lede-bugs at lists.infradead.org
Wed Jan 3 14:38:43 PST 2018


The following task has a new comment added:

FS#561 - CAAM error in logs, issue or not?
User who did this - FC7 (casasfernando)

----------
Strongswan seems to be trying to use CAAM crypto hardware device on this router but the device doesn't seem to be present or available causing strongswan to fail while trying to add a SA to the kernel.
Everytime strongswan is trying to add a SA to the kernel the following error messages are logged in strongswan and the kernel log. The kernel log error message seems to be generated by the CAAM code (I checked the kernel source to confirm this).

Strongswan log:

12[KNL] received netlink error: No such device (19)
12[KNL] unable to add SAD entry with SPI c88d8084 (FAILED)
12[KNL] received netlink error: No such device (19)
12[KNL] unable to add SAD entry with SPI 0e9ded44 (FAILED)
12[IKE] unable to install inbound and outbound IPsec SA (SAD) in kernel

Linux kernel log:

[6311485.194242] Job Ring Device allocation for transform failed
[6311485.201338] Job Ring Device allocation for transform failed
[6311497.457066] Job Ring Device allocation for transform failed
[6311497.464231] Job Ring Device allocation for transform failed

Building CAAM as a module should give users of this router the option to uninstall the CAAM module (which is useless anyway) and get strongswan to work again.
----------

More information can be found at the following URL:
https://bugs.lede-project.org/index.php?do=details&task_id=561#comment4064



More information about the lede-bugs mailing list