[Openswan Users] Re: OpenSWAN - so dang hard to implement?! Help!

[Doran Barton]

Not long ago, Paul Wouters proclaimed...
> If you really need nat-traversal, use openswan-1 (based on freeswan 1.9x)

Alright, I did a 'make rpm' (nice undocumented feature!) for 2.1.0rc1 and
it built fine, but the resulting userland stuff doesn't work. Pluto daemon
isn't running. ipsec just keeps restarting over and over until I kill -9
stuff. I'm more than happy to help the developers debug that.

In the meantime, I'm going back to 1.0.1 with the hopes I can get a VPN
with NAT-T working. 

When I do a 'make RH_KERNELSRC=/usr/src/linux-2.4.20-28.7 rpm' for 1.0.1, I
get a bunch of warnings about missing header files... and then a confcheck
error. 

Anyway- if it looks like I'm missing something, let me know.

Here's the entire stderr:

rm -rf /home/fozz/openswan-1.0.1/tmp.rpmbuild
# now, go configure each kernel type
set -e; for cfg in /usr/src/linux-2.4.20-28.7/configs/*.config; \
do \
	rm -rf /home/fozz/openswan-1.0.1/tmp.rpmkernel; \
	mkdir -p /home/fozz/openswan-1.0.1/tmp.rpmkernel; \
	(cd /home/fozz/openswan-1.0.1/tmp.rpmkernel && lndir /usr/src/linux-2.4.20-28.7 . );\
	rm -rf /home/fozz/openswan-1.0.1/tmp.rpmkernel/include/asm ;\
	(cd /home/fozz/openswan-1.0.1/tmp.rpmkernel/include/linux && sed -e '/#include "\/boot\/kernel.h"/d' <rhconfig.h >rhconfig.h-new && mv rhconfig.h-new rhconfig.h ) ;\
	rm -f /home/fozz/openswan-1.0.1/tmp.rpmkernel/include/linux/modules/*.stamp; \
	cfgshort=`basename $cfg .config | sed -e 's/kernel-[^-]*-\(.*\)/\1/'`; \
	cp $cfg /home/fozz/openswan-1.0.1/tmp.rpmkernel/.config; \
	kernnoarch=`basename $cfgshort | grep '-' | sed -e 's/.*-\(.*\)/\1/'`; \
	xtraver=`utils/kernelversion /usr/src/linux-2.4.20-28.7/Makefile | sed -e 's/.*\(-.*\)custom/\1'$kernnoarch'/'` ; \
	echo ============= Building for config file $cfgshort =========== ; \
	echo ============= Building for config file $cfgshort =========== >&2; \
	make KERNELSRC=/home/fozz/openswan-1.0.1/tmp.rpmkernel KERNMAKEOPTS="EXTRAVERSION=$xtraver" CFGSHORT=$cfgshort modclean rcf; \
	make KERNELSRC=/home/fozz/openswan-1.0.1/tmp.rpmkernel KERNMAKEOPTS="EXTRAVERSION=$xtraver" CFGSHORT=$cfgshort modrpm || exit 1; \
done >rpm.build.out ; 
============= Building for config file athlon ===========
au1000_gpio.c:41:24: asm/au1000.h: No such file or directory
au1000_gpio.c:42:29: asm/au1000_gpio.h: No such file or directory
hp_psaux.c:41:26: asm/hardware.h: No such file or directory
hp_psaux.c:43:21: asm/gsc.h: No such file or directory
In file included from hp_sdc.c:64:
/export/home/fozz/openswan-1.0.1/tmp.rpmkernel/include/linux/hp_sdc.h:45:26: asm/hardware.h: No such file or directory
/export/home/fozz/openswan-1.0.1/tmp.rpmkernel/include/linux/hp_sdc.h:288:2: #error No support for device registration on this arch yet.
hp_sdc.c:76:21: asm/gsc.h: No such file or directory
In file included from i2c-algo-ite.c:50:
i2c-ite.h:36:31: asm/it8172/it8172.h: No such file or directory
md5sum: WARNING: 1 of 13 computed checksums did NOT match
rtc.c:27:25: asm/machdep.h: No such file or directory
rtc.c:29:22: asm/time.h: No such file or directory
via-pmu.c:36:22: asm/prom.h: No such file or directory
via-pmu.c:37:25: asm/machdep.h: No such file or directory
via-pmu.c:41:26: asm/sections.h: No such file or directory
via-pmu.c:44:30: asm/pmac_feature.h: No such file or directory
via-pmu.c:47:26: asm/sections.h: No such file or directory
via-pmu.c:48:26: asm/cputable.h: No such file or directory
via-pmu.c:49:22: asm/time.h: No such file or directory
i2o_pci.c:393:1: warning: no newline at end of file
In file included from nubus_syms.c:8:
/export/home/fozz/openswan-1.0.1/tmp.rpmkernel/include/linux/nubus.h:16:23: asm/nubus.h: No such file or directory
audio.c:41:25: asm/audioio.h: No such file or directory
amd7930.c:95:26: asm/openprom.h: No such file or directory
amd7930.c:96:23: asm/oplib.h: No such file or directory
amd7930.c:100:22: asm/sbus.h: No such file or directory
amd7930.c:102:25: asm/audioio.h: No such file or directory
dbri.c:54:26: asm/openprom.h: No such file or directory
dbri.c:55:23: asm/oplib.h: No such file or directory
dbri.c:59:22: asm/sbus.h: No such file or directory
dbri.c:62:25: asm/audioio.h: No such file or directory
su.c:78:23: asm/oplib.h: No such file or directory
su.c:80:22: asm/ebus.h: No such file or directory
bbc_i2c.c:16:23: asm/oplib.h: No such file or directory
bbc_i2c.c:17:22: asm/ebus.h: No such file or directory
bbc_i2c.c:18:26: asm/spitfire.h: No such file or directory
bbc_i2c.c:19:21: asm/bbc.h: No such file or directory
In file included from bbc_i2c.c:21:
bbc_i2c.h:5:22: asm/ebus.h: No such file or directory
In file included from 53c700.c:142:
53c700.h:40:2: #error "Config.in must define either CONFIG_53C700_IO_MAPPED or CONFIG_53C700_MEM_MAPPED to use this scsi core."
53c700.c:163:22: 53c700_d.h: No such file or directory
fas216.c:55:23: asm/ecard.h: No such file or directory
newport.c:11:21: asm/gfx.h: No such file or directory
newport.c:12:21: asm/ng1.h: No such file or directory
rrm.c:15:21: asm/rrm.h: No such file or directory
shmiq.c:57:23: asm/shmiq.h: No such file or directory
shmiq.c:58:21: asm/gfx.h: No such file or directory
usema.c:38:25: asm/usioctl.h: No such file or directory
tc.c:19:27: asm/addrspace.h: No such file or directory
tc.c:21:30: asm/dec/machtype.h: No such file or directory
tc.c:22:28: asm/dec/tcinfo.h: No such file or directory
tc.c:23:30: asm/dec/tcmodule.h: No such file or directory
tc.c:24:32: asm/dec/interrupts.h: No such file or directory
tc.c:25:25: asm/paccess.h: No such file or directory
sa1100fb.c:166:26: asm/hardware.h: No such file or directory
sa1100fb.c:169:28: asm/mach-types.h: No such file or directory
sa1100fb.c:171:30: asm/arch/assabet.h: No such file or directory
sticore.c:27:26: asm/hardware.h: No such file or directory
stifb.c:76:62: asm/grfioctl.h: No such file or directory
In file included from zorro.c:17:
/export/home/fozz/openswan-1.0.1/tmp.rpmkernel/include/linux/zorro.h:158:23: asm/zorro.h: No such file or directory
zorro.c:20:25: asm/amigahw.h: No such file or directory
+ cp -a /home/fozz/openswan-1.0.1/tmp.rpmkernel/.config /home/fozz/openswan-1.0.1/tmp.rpmkernel/.config.orig
+ chmod u+w /home/fozz/openswan-1.0.1/tmp.rpmkernel/.config
+ cat /home/fozz/openswan-1.0.1/tmp.rpmkernel/.config /home/fozz/openswan-1.0.1/tmp.rpmkernel/net/ipsec/defconfig
+ rm -f /home/fozz/openswan-1.0.1/tmp.rpmkernel/.config
+ cp -a /home/fozz/openswan-1.0.1/tmp.rpmkernel/.config.tmp /home/fozz/openswan-1.0.1/tmp.rpmkernel/.config
+ rm -f /home/fozz/openswan-1.0.1/tmp.rpmkernel/.config.tmp
make[1]: *** [confcheck] Error 1
make: *** [rpm] Error 1
-- 
fozz at iodynamics.com is Doran L. Barton, president, Iodynamics LLC
Iodynamics: Linux solutions - Web development - Business connectivity
 "There will be a Moscow Exhibition of Arts by 150,000 Soviet Republic
  painters and sculptors. These were executed over the past two years."
    -- From the Soviet Weekly