Bug#612676: ipsec-tools: FTBFS on GNU/kFreeBSD.
I failed to get this bug submission forwarded automatically from BTS,
so I do it manually for reference.
The appended patch is a first outline of the changes necessary
to get the source in ipsec-tools building for GNU/kFreeBSD.
The premature dependency on libssl-dev_1.0.0 effectively prevents
the possibility to build the binary packages ipsec-utils and racoon
at the moment. Instead I have used
$ fakeroot ./debian/rules build
in order to generate all binaries. A quick test of inserting
an IPv4 point-to-point ESP tunnel using setkey and a custom kernel
is successfully detected using
$ sudo ./src/setkey/setkey -DP
This policy prevents the OpenBSD system at the other end from IPv4-pinging
the GNU/kFreeBSD system. Flushing the policies at the GNU/kFreeBSD end
then lets the ping come through. A more extensive test using Racoon remains
to be conducted, but the FTBFS is now circumvented.
The patch unfortunately needs to touch the autotools configuration,
since the macro INET6_ADVAPI is not properly detected for GNU/kFreeBSD:
the presence of "struct in6_pktinfo" depends on the macro __USE_GNU.
Apart from that the changes are mostly self-evident, but more people
in the Glibc-BSD Team ought to evaluate the patch as a document,
correcting what I might have implemented sub-optimally.
Mats Erik Andersson, DM