Troubleshooting

Tcpcryptd

Tcpcryptd is running, but tcpcrypt.org doesn’t show session ID at the bottom of the page

The most likely causes of this problem are:

• Your browser already had an open, non-tcpcrypted TCP connection to
  tcpcrypt.org before you ran the launch script. Quit and reopen your
  browser, wait 30 seconds, or use a different browser to retrieve the
  tcpcrypt.org URL.

• There’s a conflict with your existing firewall rules. See the
  firewall setup section in the install guide for your platform.

It’s also possible that the network between you and tcpcrypt.org is misbehaving and preventing tcpcrypt negotiation from occurring. Try the `nc` example in README.markdown, which only communicates locally.

If you still can’t get tcpcrypt to work, please email [email protected] (list info) or file a bug with all of the relevant info (platform, firewall rules, output of tcpcryptd -vvvv, tcpdumps, output of `test/tcpcrypt -N` (netstat mode) while connections are open).

Compilation

Assembler errors in checksum_32.S

cc    -c -o ../tcpcrypt/checksum_32.o ../tcpcrypt/checksum_32.S
../tcpcrypt/checksum_32.S: Assembler messages:
../tcpcrypt/checksum_32.S:196: Error: suffix or operands invalid for `push'
  ...   
../tcpcrypt/checksum_32.S:581: Error: suffix or operands invalid for `pop'

Pass NO_ASM=1 to make. This should have been automatically set for platforms that need it; please file a bug with the output of `uname -a` on your machine.

Linux

nfnetlink/nfq_create_queue: Operation not permitted

NFNETLINK answers: Operation not permitted
tcpcryptd: nfq_create_queue(): Operation not permitted

If you see these errors when starting tcpcryptd, then you probably have another instance of tcpcryptd running on the same computer and using the same queue. Kill it. If you really want two tcpcryptd daemons running, use the -p option to specify a different queue number.