[Openswan Users] Re: conflict of klips with native stack include files, was Re:[Openswan Users] Compiling

[Bernd Weber]

Im not sure if this helps but it might be enough to use the
#ifndef _LINUX_PFKEY2_H
#define _LINUX_PFKEY2_H
...
#endif
defines of the native stack.
On the other hand there are some real differences in the  two files:

Sizes (natives structures are  __attribute__((packed))))

Additional fields that break rfc2367 at the end of sasb_sa, 
sadb_lifetime, sadb_comp,sadb_x_sa2.

Field sadb_x_policy_reserved2 has a different name 
(sadb_x_policy_priority) in the native stack.

Structure sadb_x_debug is only in the native stack, structure 
sadb_x_ipsecrequest  is only in the openswan stack

...





_______________________________________
Bernd Weber
GWK Gesellschaft für Informationstechnologie mbH
Rathenaustraße 57
63263 Neu-Isenburg
Tel  +49 6102 786004
Fax +49 6102 786006
http://www.gwk-gmbh.de
http://www.rabox.de



Paul Wouters wrote:

> On Fri, 8 Oct 2004, Bernd Weber wrote:
>
> Michael, can you have a look at this. Should we add some #ifdef's around
> these? It seems klips' pfkey includes are conflicting with the native
> stack includes.
>
> Paul
>
>> make -C /usr/src/linux-2.6.5-7.108 
>> BUILDDIR=/home/bw/openswan-2.3.0dr2/modobj26 
>> SUBDIRS=/home/bw/openswan-2.3.0dr2/modobj26 
>> MODULE_DEF_INCLUDE=/home/bw/openswan-2.3.0dr2/packaging/linus/config-all.h 
>> ARCH=i386 modules
>> make[1]: Entering directory `/usr/src/linux-2.6.5-7.108'
>>
>> WARNING: Symbol version dump 
>> /usr/src/linux-2.6.5-7.108/Module.symvers is missing, modules will 
>> have CONFIG_MODVERSIONS disabled.
>>
>> ln -s -f /home/bw/openswan-2.3.0dr2/linux/net/ipsec/ipsec_init.c 
>> /home/bw/openswan-2.3.0dr2/modobj26/ipsec_init.c
>> CC [M]  /home/bw/openswan-2.3.0dr2/modobj26/ipsec_init.s
>> In file included from 
>> /home/bw/openswan-2.3.0dr2/modobj26/ipsec_init.c:97:
>> /home/bw/openswan-2.3.0dr2/linux/include/pfkeyv2.h:39:1: warning: 
>> "SADB_X_NAT_T_NEW_MAPPING" redefined
>> In file included from include/net/xfrm.h:10,
>>                from include/linux/netfilter_ipv4.h:91,
>>                from include/net/ip.h:34,
>>                from /home/bw/openswan-2.3.0dr2/modobj26/ipsec_init.c:63:
>> include/linux/pfkeyv2.h:243:1: warning: this is the location of the 
>> previous definition
>> In file included from 
>> /home/bw/openswan-2.3.0dr2/modobj26/ipsec_init.c:97:
>> /home/bw/openswan-2.3.0dr2/linux/include/pfkeyv2.h:40:1: warning: 
>> "SADB_MAX" redefined
>> In file included from include/net/xfrm.h:10,
>>                from include/linux/netfilter_ipv4.h:91,
>>                from include/net/ip.h:34,
>>                from /home/bw/openswan-2.3.0dr2/modobj26/ipsec_init.c:63:
>> include/linux/pfkeyv2.h:244:1: warning: this is the location of the 
>> previous definition
>> In file included from 
>> /home/bw/openswan-2.3.0dr2/modobj26/ipsec_init.c:97:
>> /home/bw/openswan-2.3.0dr2/linux/include/pfkeyv2.h:42: error: 
>> redefinition of `struct sadb_msg'
>> ...
>> _______________________________________
>> Bernd Weber
>> GWK Gesellschaft für Informationstechnologie mbH
>> Rathenaustraße 57
>> 63263 Neu-Isenburg
>> Tel  +49 6102 786004
>> Fax +49 6102 786006
>> http://www.gwk-gmbh.de
>> http://www.rabox.de
>>
>>
>>
>> Paul Wouters wrote:
>>
>>> On Thu, 7 Oct 2004, Bernd Weber wrote:
>>>
>>>> So I have tried to compile OpenSwan 2.3.0dr2 on a SuSE 9.1 Machine 
>>>> - mostly standard runnning Kernel 2.6.5-7.108-default and using the 
>>>> source of this kernel. I have taken the kernel Konfiguration 
>>>> (.config) from a running SuSE Standard Kernel and run make menugo 
>>>> command.
>>>
>>>
>>>
>>> You should try:
>>>
>>> cd openswan
>>> export KERNELSRC=/usr/src/linux-2.6.5-7.108-default
>>> make module26
>>>
>>> You should have an unpatched kernel for this, so no klips code in 
>>> there already.
>>>
>>> KLIPS on 2.6 kernels is getting there, but we still are testing 
>>> this. It is not
>>> stable yet for production use.
>>>
>>> Paul
>>
>>
>