Bug 388623

I use the novell-ipsec-tools for connecting the vpn server.

https://bugzilla.novell.com//show_bug.cgi?id=381769

It works fine in 10.3 without ipv6 enable.

In 11.0 beta2, it couldn't work when ipv6 disabled.
It call the send api send to a PF_KEY socket.

so = socket(PF_KEY, SOCK_RAW, PF_KEY_V2)

    if ((len = send(so, (void *)msg, (socklen_t)len, 0)) < 0) {
        __ipsec_set_strerror(strerror(errno));
        return -1;
    }

send is ok, but it receive the msg:

Apr 29 18:32:18 Azi racoon: DEBUG: pfkey.c:232:pfkey_handler(): get pfkey UPDATE message
Apr 29 18:32:18 Azi racoon: DEBUG2: plog.c:208:plogdump():  02025d03 02000000 f561330f a5170000
Apr 29 18:32:18 Azi racoon: ERROR: pfkey.c:247:pfkey_handler(): pfkey UPDATE failed: Protocol not supported
Apr 29 18:32:18 Azi racoon: DEBUG: pfkey.c:232:pfkey_handler(): get pfkey ADD message
Apr 29 18:32:18 Azi racoon: DEBUG2: plog.c:208:plogdump():  02035d03 02000000 f561330f a5170000
Apr 29 18:32:18 Azi racoon: ERROR: pfkey.c:247:pfkey_handler(): pfkey ADD failed: Protocol not supported

and the pfkey_handler() call the recv,

 *lenp = recv(so, (caddr_t)&buf, sizeof(buf), MSG_PEEK);

the recv's messsage structure from /usr/include/linux/pfkeyv2.h

struct sadb_msg {
    uint8_t     sadb_msg_version;
    uint8_t     sadb_msg_type;
    uint8_t     sadb_msg_errno;
    uint8_t     sadb_msg_satype;
    uint16_t    sadb_msg_len;
    uint16_t    sadb_msg_reserved;
    uint32_t    sadb_msg_seq;
    uint32_t    sadb_msg_pid;
} __attribute__((packed));

so from "02025d03 02000000 f561330f a5170000", the errno is 0x5d, it means EPROTONOSUPPORT.

It's related to the esp4.ko, when I removed the esp4.ko in 10.3, then it prompt
the same message:
Protocol not support.

When I enable the ipv6 in yast it works fine. And I found kernel load the esp4
and xfrm6_mode_tunnel, if disable ipv6, the kernel couldn't load the esp4, in my opinion it caused by not loading the xfrm6_mode_tunnel, so it received the error message.