Using OpenVPN with cryptodev on Pogo V4 (Mobile)

[nwestfal]

@Socaltom,

New dependency? I see that I too have cryptsetup installed.

When I tested between two pogo devices with cryptodev, it seemed to work, but not with Windows or other Linux clients not using cryptodev. How are you using it?

Do you happen to know which version of openssl-cryptodev you were using when it was still working for you?

Although I'm guessing the problem would be in the current cryptodev kernel module rather than userland utilties.

[WarheadsSE]

$this->bbcode_second_pass_quote('', 'W')hen I tested between two pogo devices with cryptodev, it seemed to work, but not with Windows or other Linux clients not using cryptodev. How are you using it?

[Socaltom]

$this->bbcode_second_pass_quote('nwestfal', '@')Socaltom,

New dependency? I see that I too have cryptsetup installed.

When I tested between two pogo devices with cryptodev, it seemed to work, but not with Windows or other Linux clients not using cryptodev. How are you using it?

Do you happen to know which version of openssl-cryptodev you were using when it was still working for you?

Although I'm guessing the problem would be in the current cryptodev kernel module rather than userland utilties.

[nwestfal]

cryptodev module is part of linux-kirkwood:

$this->bbcode_second_pass_code('', '
[root@Anduin extra]# uname -a
Linux Anduin 3.16.3-2-ARCH #1 PREEMPT Fri Sep 19 00:31:59 MDT 2014 armv5tel GNU/Linux
[root@Anduin extra]# pwd
/usr/lib/modules/3.16.3-2-ARCH/extra
[root@Anduin extra]# ls -l
total 56
-rw-r--r-- 1 root root 50354 Sep 18 23:34 cryptodev.ko
[root@Anduin extra]# file cryptodev.ko
cryptodev.ko: ELF 32-bit LSB relocatable, ARM, EABI5 version 1 (SYSV), BuildID[sha1]=88a056319da27626743c1baedaad8cefd8398523, not stripped
[root@Anduin extra]# pacman -Q linux-kirkwood --list | grep cryptodev
linux-kirkwood /usr/lib/modules/3.16.3-2-ARCH/extra/cryptodev.ko
[root@Anduin extra]#
')

[Socaltom]

So does that mean it uses it by default?
Tom

[nwestfal]

No, I do believe you still have to explicitly load it with modprobe or automatically at boot with appropriate file placed in /etc/modules-load.d/

E.g. these are the instructions I used when I was trying to get it to work:

$this->bbcode_second_pass_code('', '
pacman -Syyu
pacman -S openssl-cryptodev
echo 'KERNEL=="crypto", MODE="0666"' > /etc/udev/rules.d/99-cryptodev.rules
# Load the kernel module manually after each new boot:
modprobe cryptodev
# or let systemd load it automatically on boot
echo "cryptodev" > /etc/modules-load.d/cryptodev.conf
')

(from viewtopic.php?f=30&t=2452)

[sputnik]

I too have been having trouble recently with cryptodev and openvpn. Also with prosody, hmm, something else too. Openvpn will not start, Pidgin will not connect to my prosody server.
It is a problem with kernels > 3.16. I have a 3.15.8 archlinuxarm kernel still and it works fine with that.
Moonman has recently filed a bug on the cryptodev github site. I followed the chain of that conversation, made the patches, still I find the same problem.
This occurred as I was switching from non-fdt kernels to fdt and it really hurt my brain But no, it's only the version that counts. Using Bodhi's new uboot(Thanks for the great work Bodhi! not just the uboot). Ahem, not archlinuxarm.
For now I've removed the cryptodev module from loading, guess we are going to have to file a bug.
Regarding Bodhi's warning about possible data corruption, I had problems back in May, filed a bug at the cryptodev github site, Nikos is quite a helpful fellow and I believe the issues folks are having are due to the foot-dragging by the openssl team in replacing the eng_cryptodev.c file, supplied by the cryptodev team to them. They have repeatedly told them it is out of date, have given them a new file, still we get the same faulty file. I also wrote to the openssl mailing list and commented on it.
Replacing that file and recompiling openssl fixed all of my problems until now.

[sputnik]

Tentatively speaking, all seems back to normal with the 3.17.0 kernel. Openvpn and prosody seem fine with cryptodev installed.

[moonman]

Have you tried 3.16.4 ? Is it still buggy on that one? (Linux-kirkwood)

[sputnik]

Sorry for the delay moonman, wasn't following.
No, if it works, don't fix it, haven't tried regressing to the 3.16 series, why? All fine now, a couple of months on the 3.17 series.