[Openswan Users] ipsec verify on openswan 2.4.5

[Paul Wouters]

On Tue, 25 Apr 2006, Rob Hasselbaum wrote:

> Subject: RE: [Openswan Users] ipsec verify on openswan 2.4.5
>
> I am having the exact same problem with kernel 2.6.16. I applied the NAT-T
> patch, ran make oldconfig and menuconfig to enable the NAT-T option, built
> and booted into the new kernel, unloaded the NETKEY modules and loaded the
> ipsec one. But I get the same failure in ipsec verify.

The check is wrong, Please ignore it. It will be fixed.

> I did not apply the KLIPS patch to the kernel. As I understand it, it's only
> needed if you don't want to load KLIPS as a module, right?

You do not need the NAT-T patch when using NETKEY. The NAT-T patch is only
for KLIPS.

Paul