[Openswan Users] Problem linux-2.6.22.2/openswan-2.4.9 KLIPS

[Paulo F. Sedrez]

On The, 16 Aug 2007, Paul wrote:

> On Thu, 16 Aug 2007, Den wrote:
> 
> > I can't compile linux-2.6.22.2/openswan-2.4.9 KLIPS.
> > Please, help me.
> 
> If you really need kernels that new, you might want to try the git 
> repository of openswan, the #testing branch. That's where we are 
> currently comitting fixes for newer kernels, though not all of them 
> are in. A lof of surgery happened to the skb (again).

Yeap. They are trying to fix alignment problems in 64-bits
architectures. Most direct access to members of struct sk_buff are now
to be done through inline functions.
 
> By far the easiest is to go back to something like 2.6.18.7.

That may not be acceptable. Kernel 2.6.22.1 (and .2) was released for
Fedora 6 and 7 as security update. Having a secure tunnel layer under an
insecure kernel is not the best solution...

BTW, with 2.4.9 works fine with kernel 2.6.20.

> > /usr/src/openswan-2.4.9>make KERNELSRC=/usr/src/linux-2.6 programs
module
> > ...
> > /usr/src/openswan-2.4.9/linux/include/openswan/ipsec_proto.h:76:
> > warning: "struct iphdr" declared inside parameter list

For that, I got a fix, check http://bugs.xelerance.com/view.php?id=814;
of course, after that you will get stuck with the skb problems...

-- 
Paulo F. Sedrez <sedrez+openswan at sedrez.ods.org>