[Openswan dev] New/final steps to build KLIPS on 2.6

Nate Carlson natecars at natecarlson.com
Wed Jul 7 09:17:52 CEST 2004


On Wed, 7 Jul 2004, Tuomo Soini wrote:
> No it does not with 2.6 kernels or other kernels with 2.6sec. NAT-T
> klips code uses old ESPinUDP code while 2.6sec enabled kernels have
> slightly different interface called UDP_ENCAP.
> 
> Openswan-2 need to be ported to use UDP_ENCAP interface in 2.6sec _both_
> with 2.4 kernls and 2.6 kernel.
> 
> It's easier to support only one interface only and because there is
> ready code for 2.4 kernel for UDP_ENCAP interface in 2.6sec backport
> it's quite easy to change all openswan-2 code use that new, different
> interface.
> 
> pluto is able to handle UDP_ENCAP now but 2.6 KLIPS needs work to
> support it.

Ah, this is also why KLIPS doesn't work with NAT Traversal when built on a
2.4 kernel with the backported 26sec support?

------------------------------------------------------------------------
| nate carlson | natecars at natecarlson.com | http://www.natecarlson.com |
|       depriving some poor village of its idiot since 1981            |
------------------------------------------------------------------------


More information about the Dev mailing list