[Openswan Users] Creating a Fedora kernel RPM with KLIPS support

[Paul Wouters]

On Thu, 27 Apr 2006, Tim Larsen wrote:

> Thought I'd mention an article I wrote for my employer, SmoothWall,
> describing how to build a kernel RPM for Fedora Core 4 with KLIPS
> support. The howto should be translate well to other versions of fedora
> as well.
>
> http://www.smoothwall.net/support/knowledge/view.php?id=72

Thanks for the link. One comment I have. The NAT-T patch does not change that
often, unlike the KLIPS code. I think it would be much better to only add
the NAT-T patch to the kernel spec, and then build KLIPS from the openswan
spec file using:

rpmbuild -ba openswan.spec --define 'buildklips 1'

This will attempt to build an openswan-klips rpm (as well as the userland
openswan rpm). It will use the latest installed kernel. You can use a
specific kernel version using:

rpmbuild -ba openswan.spec --define 'buildklips 1' --define 'kversion 2.6.16-1.2069_FC4'

Now when you want to update openswan's KLIPS, you don't need to rebuild another
kernel rpm.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155