Skip to content

wg-fips genkey fails with mnlg_socket_open: Protocol not supported #6

@rafitox

Description

@rafitox

Hey everyone! Amazing project =) I stumbled upon an issue while setting up the VPN client following the recent wolfGuard-boringtun tutorial and i'd appreciate some help;

When attempting to generate the cryptographic keys using the configuration utility, the binary fails to initialize the necessary netlink sockets.

Steps to Reproduce

1. Clone `wolfGuard` and navigate to `user-src`.
2. Run `make`.
3. Execute the key generation command:
   ```bash
   ./wg-fips genkey | tee private-key

The command immediately fails with the following output:

mnlg_socket_open: Protocol not supported.
ipc_generate_privkey() failed: Protocol not supported.

It seems to me that the mnlg library is unable to open the required generic netlink family socket interface, cascading into the internal ipc_generate_privkey() initialization failure. I'm using 6.17.9-76061709-generic kernel by the way =)

I would love to understand if there are specific kernel module prerequisites or capability flags required for the FIPS user-space IPC harness to bind correctly here.

Any help/ workarounds would be highly appreciated! Best regards.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions