Re: Big VPN

["J.H.M. Dassen (Ray)" <fsmla@xinara.org>]

On Wed, Mar 03, 2004 at 01:25:46 +0100, Milan P. Stanic wrote:
> FreeS/WAN is "orphaned" upstream. OpenSWAN is based on FreeS/WAN and as
> such it does not work with 2.6.

"For Kernel's 2.6.0 and higher, Openswan uses the built in IPsec support.
Only the userland component of Openswan is required to use Openswan with a
2.6 series kernel. 
[...] 
Note: you will need setkey from the ipsec-tools package, available from
http://ipsec-tools.sourceforge.net";
(From http://www.openswan.org/code/openswan-2.1.0rc1.tar.gz's README)

The way I read it is that the userland part of Openswan works fine with 2.6,
it's just that with a 2.6 kernel its IPSec kernel part is used rather than
an Openswan or FreeS/WAN one as was the case with 2.4 (which didn't have an
IPSec kernel part by default).

Ray
-- 
Those who are willing to trade their liberty for security deserve neither.
	Benjamin Franklin