[Openswan Users] error with kernel compile - 2.4.28 and openswan 2.3.0

[Theodore Wynnychenko]

Hello:

I was wondering if anyone had any ideas about what I should do.

I have been trying to add Openswan 2.3.0 to a Debian Linux 2.4.28 grsecurity
patched kernel.  I have followed the directions on the Wiki for  building
from the tarball (basically, wget, tar, make nattpatch | (cd /usr/src/linux
&& patch -p1), make KERNELSRC=/usr/src/linux precheck verset kpatch, make
menuconfig, make dep, make clean, make bzImage).  I have also tried patching
the kernel with the 2.3.0.kernle-2.4-natt.patch.gz and
2.3.0.kernel-2.4-klips.patch.gz (basically, wget, gunzip, patch natt, patch
klips, make menuconfig, make dep, make clean, make bzImage).

Both routes end in the same error message.  I get (the last few lines of
output from make bzImage follows):

make[2]: Leaving directory `/usr/src/linux-2.4.28/arch/i386/lib'
make[1]: Leaving directory `/usr/src/linux-2.4.28/arch/i386/lib'
gcc -E -C -P -I/usr/src/linux-2.4.28/include -D__KERNEL__ -imacros
/usr/src/linux-2.4.28/include/linux/config.h -imacros
/usr/src/linux-2.4.28/include/asm-i386/segment.h -imacros
/usr/src/linux-2.4.28/include/asm-i386/page.h -Ui386 arch/i386/vmlinux.lds.S
>arch/i386/vmlinux.lds
ld -m elf_i386 -T /usr/src/linux-2.4.28/arch/i386/vmlinux.lds -e stext
arch/i386/kernel/head.o arch/i386/kernel/init_task.o init/main.o
init/version.o init/do_mounts.o \
        --start-group \
        arch/i386/kernel/kernel.o arch/i386/mm/mm.o kernel/kernel.o mm/mm.o
fs/fs.o ipc/ipc.o \
         drivers/parport/driver.o drivers/char/char.o drivers/block/block.o
drivers/misc/misc.o drivers/net/net.o drivers/ide/idedriver.o
drivers/cdrom/driver.o drivers/pci/driver.o drivers/video/video.o
drivers/usb/usbdrv.o drivers/media/media.o crypto/crypto.o \
        net/network.o \
        grsecurity/grsec.o \
        /usr/src/linux-2.4.28/arch/i386/lib/lib.a
/usr/src/linux-2.4.28/lib/lib.a /usr/src/linux-2.4.28/arch/i386/lib/lib.a \
        --end-group \
        -o vmlinux
net/network.o: In function `ipsec_rcv_esp_decrypt':
net/network.o(.text+0x65542): undefined reference to `des_ede3_cbc_encrypt'
make: *** [vmlinux] Error 1


I have googled the different text strings in the error message, and this has
not led to any enlightenment.  I have tried compiling the kernel with
(basically) all of the kernel "crytographic options" selected, and this has
not helped.

Thanks in advance for any ideas.

Bye - Ted