[Openswan dev] Openswan and NETKEY

[Paul Wouters]

On Thu, 20 Mar 2008, Leena Soman wrote:

> So after we build and install openswan, it gets loaded as a kernel module,
> right? If we have to statically compile it in, we would have to rebuild the
> kernel. Is my understanding correct?

NETKEY comes with your kernel
KLIPS is a seperate kernel compile

Under openswan 2.4.x, we first check which stack is loaded (and abort if we
find both), and if none is loaded, we try to load KLIPS.

Under openswan 2.5.x, we check the config option protostack= to see which
stack is desired, and try to load it (and abort if we find both). If unset,
it behaves as 2.4.x.

Paul