[Openswan dev] trouble building openswan-2.2.0-1fc3.src.RPM for Fedora Core 3 on x86-64

[Ken Bantoft]

On Sun, 2004-11-28 at 21:38 -0500, D. Hugh Redelmeier wrote:
> I would like OE on my notebook (FC3 x86-64) so I thought I'd try
> ftp://ftp.openswan.org/openswan/binaries/Fedora-RPMS/FC3/SRPMS/openswan-2.2.0-1fc3.src.rpm
> (There are no binary RPMs for x86-64 advertised.)
> 
> Unfortunately, it would not build.  I've included the log, but here
> are the highlights:
> 
> - several compiler warnings.  Lots like:
>   ../../linux/lib/libfreeswan/pfkey_v2_build.c:178: warning: use of cast expressions as lvalues is deprecated
> 
>   Some like:
>   ../../linux/lib/libfreeswan/pfkey_v2_build.c:263: warning: comparison is always false due to limited range of data type
> 
>   There are a few more.
> 
>   Probably due to stricter GCC
>   gcc (GCC) 3.4.2 20041017 (Red Hat 3.4.2-6.fc3)

Yes, GCC keeps tightening the screws.


> - "error: File not found: /var/tmp/openswan-buildroot/usr/lib64/ipsec"
> 
>   This is probably due to FC3 x86-64's "biarch" support.  Native code
>   tends to use libraries with 64 in their name.

Interesting - I haven't run into this.  I know ia64 doesn't have biarch,
so I guess x86_64 is the first platform we'll need to deal with this.
Hm.


> I've not debugged this.  I have no time right now.  Anyway, I suspect
> that I'm not the first to bump into this and that there is an accepted
> fix for this problem.

You're the 1st to report it.


> So: what is the best (easiest, most likely to succeed) current way of
> getting OE to work on FC3 on x86-64?  I'd prefer not to have to
> rebuild the kernel, so I guess that this means using the 2.6 IPsec.

NETKEY (2.6 IPsec) is still broken for OE, due to the dropping of the
1st packet.

2.2.0 doesn't have KLIPS for 2.6 - please try 2.3.0dr4, which has been
reported to work on at least x86 for KLIPS on 2.6

I don't have access to x86_64, so I'm sure other minor tweaks might be
needed.

Ken