[Openswan Users] FreeSwan 2.06 update to get certificates, userland only?

[Jacco de Leeuw]

Bram Bouwens wrote:

> /lib/modules/2.4.20-37_40.rh7.3.at/updates/net/ipsec/ipsec.o failed
> 
> What I did? I installed kernel-2.4.20-37_40.rh7.3.at.i586.rpm,
> openswan-kmdl-2.4.20-37_40.rh7.3.at-2.3.1-21.rh7.3.at.i586.rpm
> and openswan-2.3.1-21.rh7.3.at.i386.rpm .
> Now I saw that the kernel RPM itself also contained an ipsec.o,
> so I removed the openswan-kmdl and I do have a situation that
> works (at least) as before.

Either install the kernel RPM or the kernel module RPM. Not both.
You need the kernel RPM for NAT-T support. Check with
rpm -V kernel-2.4.20-37_40.rh7.3 whether files were overwritten.
If so, you may need to reinstall the kernel RPM.

> Am I now missing the certificate support, or something else?

No, both RPMs support X.509.

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl