DD-WRT: StrongSwan, IPSec w/ XFRM

For Developers
1

Hello All,

Would anyone be able to share prebuilt packages and dependencies for XFRM?

root@DD-WRT:/opt/xfrm4# insmod -v xfrm_user.ko; dmesg tail|grep -Ei xfrm
Using xfrm_user.ko
insmod: cannot insert 'xfrm_user.ko': unknown symbol in module
xfrm_user: Unknown symbol security_xfrm_state_delete (err 0)
xfrm_user: Unknown symbol security_xfrm_state_alloc (err 0)
xfrm_user: Unknown symbol security_xfrm_policy_alloc (err 0)
xfrm_user: Unknown symbol security_xfrm_policy_free (err 0)

Virtually all the modules load except the xfrm_user . Need the above for dependencies:

root@DD-WRT:/opt/xfrm4# for mods in $(echo tunnel4.ko ip_tunnel.ko xfrm_algo.ko xfrm4_tunnel.ko xfrm_ipcomp.ko esp4.ko ah4.
ko xfrm4_mode_beet.ko xfrm4_mode_beet.ko xfrm4_mode_transport.ko xfrm4_mode_tunnel.ko xfrm_user.ko); do insmod $mods; done
insmod: cannot insert 'tunnel4.ko': File exists
insmod: cannot insert 'ip_tunnel.ko': File exists
insmod: cannot insert 'xfrm_algo.ko': File exists
insmod: cannot insert 'xfrm4_tunnel.ko': File exists
insmod: cannot insert 'xfrm_ipcomp.ko': File exists
insmod: cannot insert 'esp4.ko': File exists
insmod: cannot insert 'ah4.ko': File exists
insmod: cannot insert 'xfrm4_mode_beet.ko': File exists
insmod: cannot insert 'xfrm4_mode_beet.ko': File exists
insmod: cannot insert 'xfrm4_mode_transport.ko': File exists
insmod: cannot insert 'xfrm4_mode_tunnel.ko': File exists
insmod: cannot insert 'xfrm_user.ko': unknown symbol in module
root@DD-WRT:/opt/xfrm4#

I'm using a DD-WRT version but understand that XFRM support isn't compiled in so trying external kernel modules to see if things will work.

Router / Version: Asus RT-AC68U
File/Kernel: 4.4.228 #380 SMP Tue Jun 23 08:47:04 +04 2020 armv7l DD-WRT
Issues/Errors: none
Mode: OSPF Router
Firmware: RT-AC68U: DD-WRT v3.0-r43502 std (06/23/20)
Notables: OSPF

REF: https://forum.dd-wrt.com/phpBB2/viewtopic.php?p=1209261#1209261

Thx,

2

Please contact DD-WRT for support about their firmware, both projects are independent and don't share a common code base, we can't help you with that.

1 Like
3

Yeah I fully get that and already have a thread going for them. Still, I want to try OpenWRT packages nontheless. How close could I get to my kernel version and the kernel modules above?

I just want to try them out.

4

It's neither supported, nor possible - at best it would crash and burn.

5

I'm 99.999% sure you're right. However, I'll still take the risk. Is there a download path I could pull these from?

6

Would you also be able to provide the link to the toolchains .zip files? I would like to try to use these to try and compile a kernel and see about generating the modules I need as a Plan B) sort of scenario.