[Openswan dev] Error building klips-ipv6 (missing include?)

[David McCullough]

Jivin Ruben Laban lays it down ...
> On Thursday 12 August 2010 at 10:12 (CET), Ruben Laban wrote:
> > When I try to build the klips-ipv6 branch, I get the following error:
> > 
> > make[3]: Entering directory
> > `/root/openswan-ipv6/OBJ.linux.i386/programs/tncfg' cc -c -g -Werror
> > -DSCANDIR_HAS_CONST  -I/root/openswan-ipv6/ports/linux/include 
> > -I/root/openswan-ipv6/ports/linux/include  -I/root/openswan-
> > ipv6/ports/linux/include  -I/root/openswan-ipv6/ports/linux/include 
> > -I/root/openswan-ipv6 -I/root/openswan-ipv6/linux/include
> > -I/root/openswan-ipv6/include  -Wall - Wpointer-arith -Wcast-qual
> > -Wstrict-prototypes -Wbad-function-cast  -DKLIPS -DNAT_TRAVERSAL
> > -DNAT_TRAVERSAL -DKERNEL_ALG -DIKE_ALG - DFINALCONFDIR=\"/etc\"
> > -DFINALCONFDDIR=\"/etc/ipsec.d\" -DFINALCONFFILE=\"/etc/ipsec.conf\"
> > -DFINALVARDIR=\"/var\" -Werror /root/openswan- ipv6/programs/tncfg/tncfg.c
> > cc1: warnings being treated as errors
> > In file included from /root/openswan-ipv6/programs/tncfg/tncfg.c:51:
> > /root/openswan-ipv6/linux/include/openswan/ipsec_tunnel.h:145: error:
> > 'struct sk_buff' declared inside parameter list
> > /root/openswan-ipv6/linux/include/openswan/ipsec_tunnel.h:145: error: its
> > scope is only this definition or declaration, which is probably not what
> > you want make[3]: *** [tncfg.o] Error 1
> > 
> > To me it appears to be a missing include file (containing the definition of
> > struct sk_buff).
> 
> Apparently it's userland that got broken by a chance (addition really) to 
> ipsec_tunnel.h.
> 
> However, building kernel module fails as well:
> 
>   CC [M]  /root/openswan-ipv6/modobj26/ipsec_xmit.o
> /root/openswan-ipv6/modobj26/ipsec_xmit.c: In function 'ipsec_xmit_send':
> /root/openswan-ipv6/modobj26/ipsec_xmit.c:2533: error: 'NF_IP_LOCAL_OUT' 
> undeclared (first use in this function)
> /root/openswan-ipv6/modobj26/ipsec_xmit.c:2533: error: (Each undeclared 
> identifier is reported only once
> /root/openswan-ipv6/modobj26/ipsec_xmit.c:2533: error: for each function it 
> appears in.)
> /root/openswan-ipv6/modobj26/ipsec_xmit.c:2533: error: 'struct sk_buff' has no 
> member named 'dst'
> /root/openswan-ipv6/modobj26/ipsec_xmit.c:2537: error: 'struct sk_buff' has no 
> member named 'dst'
> make[3]: *** [/root/openswan-ipv6/modobj26/ipsec_xmit.o] Error 1
> 
> This is likely a kernel incompatibility. This is on a Ubuntu-based 2.6.32 
> kernel.
> 
> So, in other words: what are the kernel (and possibly other) requirements in 
> order to succesfully build klips-ipv6?

Hmm,  I didn't realise that ipsec_tunnel.h was used by userland at all :-(

I have pushed some changes for that.

Also the NF_IP_LOCAL_OUT is just a pain,  depending on what order headers
are included in and whether or not you are using CentOS or a linux kernel
it's all over the place.  Try the attached patch after pull that latest
changes to klips-ipv6.

I think that should do it,  if not,  let me know what kernel version you
are using.

I am running on 2.6.26 at the moment,  but will try out 2.6.35 tomorrow
and make sure all is well,

Cheers,
Davidm

-- 
David McCullough,      david_mccullough at mcafee.com,  Ph:+61 734352815
McAfee - SnapGear      http://www.mcafee.com         http://www.uCdot.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nf_inet_local_out.patch
Type: text/x-diff
Size: 1450 bytes
Desc: not available
Url : http://lists.openswan.org/pipermail/dev/attachments/20100812/51f3a810/attachment.bin