[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: kernel with IPSec support?



On Fri, Jul 18, 2003 at 11:13:20 -0400, Noah L. Meyerhans wrote:
> On Fri, Jul 18, 2003 at 11:53:10AM +0200, Vincent Lefevre wrote:
> > I've tried to compile kernels from kernel-source-2.4.21 (with
> > kernel-patch-freeswan) and kernel-source-2.5.69, and I've also
> > tried with kernel-patch-benh, but each time, the compilation
> > fails.
> 
> I had no problem building 2.4.21 with woody's freeswan patches.

What did you do exactly?

> > Are there benh kernels that support IPSec or can be patched to
> > support it via FreeSWan (knowing the fact that FreeSWan doesn't
> > support 2.4.21 -- see bug 199211)?
> 
> Eeek, don't tell my G3 about that bug, maybe it'll stop working!  ;^)

The problem is only for compiling the kernel. :)

> I don't remember whether or not I applied the benh patch to my 2.4.21
> tree.  I don't think so.
> 
> I could concievably send you my kernel-image .deb for 2.4.21+freeswan.
> Or maybe you should go back and try the woody freeswan patch.

Well, I have the woody version:

Selected version 1.96-1.4 (Debian-Security:3.0/stable) for
kernel-patch-freeswan

The file /usr/src/kernel-patches/all/freeswan/klips/net/ipsec/ipsec_init.c
from this package contains the following lines:

        inet_add_protocol(&esp_protocol);
        inet_add_protocol(&ah_protocol);
        inet_add_protocol(&comp_protocol);

But in 2.4.21 (contrary to 2.4.20), inet_add_protocol has a second
argument: /usr/src/kernel-source-2.4.21/include/net/protocol.h
contains

extern int inet_add_protocol(struct inet_protocol *prot, unsigned char num);

In your case, does inet_add_protocol() have one or two arguments?

-- 
Vincent Lefèvre <vincent@vinc17.org> - Web: <http://www.vinc17.org/> - 100%
validated (X)HTML - Acorn Risc PC, Yellow Pig 17, Championnat International
des Jeux Mathématiques et Logiques, TETRHEX, etc.
Work: CR INRIA - computer arithmetic / SPACES project at LORIA



Reply to: