-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi list, since some time (and I'm unsure exactly when) my strongSwan IKE/IPsec setup at home doesn't work anymore, with charon reporting (https://pastebin.com/7tThD1B5): received netlink error: Accessing a corrupted shared library (80) This is on a Debian Bullseye machine running Debian kernel 5.10.140-1 (5.10.0- 18-amd64). With some help from Tobias Brunner (from strongSwan project) I tried to debug the issue (I was already fairly certain it was a local issue because if the standard Debian kernel started misbehaving like that we would have a whole lot more reports everywhere. Removing strongSwan from the equation, I tried to inject directly an xfrm state with ip (the parameter are a bit bogus but I don't think it matters at that point): ip xfrm state add src 10.0.0.1 dst 10.0.0.2 proto esp spi 123456 sel src 10.0.0.3 dst 10.0.0.4 enc aes 0xabcdefabcdef RTNETLINK answers: Accessing a corrupted shared library I tried on a different Debian box and the output is: ip xfrm state add src 10.0.0.1 dst 10.0.0.2 proto esp spi 123456 sel src 10.0.0.3 dst 10.0.0.4 enc aes 0xaabbccddee RTNETLINK answers: Invalid argument So there's definitely something fishy in my kernel and I'm unsure why. Would anyone have a clue about what is happening here, and any idea how to debug further? Regards, - -- Yves-Alexis -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAmNAUTEACgkQ3rYcyPpX RFtDUAf/Vu0Ls/bNtEXp1JoxmJucztLoUBGZyaLs1fnxig5TzlLAohOF2OjV1ykh U3m4fCRqM5JThpLLyISoch4PNBRnjMaR58l/fnvpeEgI7TmBXwJiA4IiVQuvfos/ jxrlp8tAQUvJCm1Se8NGeolBTi0a+SngHig+mW0ix4jde1NKOWdVJ6MZPQgcSIM9 eI8Rdvska6RToQ6VsyscjhjdM6HS6sk7/2me3CF4ezcn3atAJwTANMwLv1Y4CS0x UeT/HVdWCqPptYUDgyLhcF6OC49wjQ79zTfZcQOGYHJTNh9Q3rXXsLqICYsRaTiU SXzhPZzOaALKeTfY1jXw0LAFfSwdnQ== =kv2/ -----END PGP SIGNATURE-----
