[Openswan dev]

[Paul Wouters]

On Sun, 28 Nov 2004, D. Hugh Redelmeier wrote:

> ftp://ftp.openswan.org/openswan/binaries/Fedora-RPMS/FC3/SRPMS/openswan-2.2.0-1fc3.src.rpm
> (There are no binary RPMs for x86-64 advertised.)

FC3 has binaries that should work for you:
ftp://ftp.nl.net/pub2/fedora/3/x86_64/os/Fedora/RPMS/openswan-2.1.5-2.x86_64.rpm

> - several compiler warnings.  Lots like:
>  ../../linux/lib/libfreeswan/pfkey_v2_build.c:178: warning: use of cast expressions as lvalues is deprecated
>
>  Some like:
>  ../../linux/lib/libfreeswan/pfkey_v2_build.c:263: warning: comparison is always false due to limited range of data type

those have been there for a while, and don't seem the cause for breaking.

>  There are a few more.
>
>  Probably due to stricter GCC
>  gcc (GCC) 3.4.2 20041017 (Red Hat 3.4.2-6.fc3)

yes there are.

> - "error: File not found: /var/tmp/openswan-buildroot/usr/lib64/ipsec"
>
>  This is probably due to FC3 x86-64's "biarch" support.  Native code
>  tends to use libraries with 64 in their name.

Is this just for lib? Or is there also /usr/include64/ ?

> I've not debugged this.  I have no time right now.  Anyway, I suspect
> that I'm not the first to bump into this and that there is an accepted
> fix for this problem.

You are the first to report this, and we haven't compiled for x86-64 it
seems. I guess until we detect this properly, you have to set LIBEXECDIR
and LIBDIR manually in Makefile.inc.

And it seems those two values should use "?=" and not "=" so that they
can be properly set before running make.

> So: what is the best (easiest, most likely to succeed) current way of
> getting OE to work on FC3 on x86-64?  I'd prefer not to have to
> rebuild the kernel, so I guess that this means using the 2.6 IPsec.

You cannot use the new stack for OE, since it does no first packet 
cachine, and return 'Resource temporary unavailable' for all network
packets that would hit an OE trigger.

> cookie.c: In function `get_cookie':
> cookie.c:55: warning: declaration does not declare anything
> cookie.c:55: warning: declaration does not declare anything

That one I've never seen so far.

> pem.c: In function `pemtobin':
> pem.c:434: warning: passing arg 6 of `ttodata' from incompatible pointer type

That is new too.

I'll have a look again at the FC3 spec file and see what they have done
differently to solve this. I'll get back to you.

Paul
Paul