[Openswan Users] openswan-2.4.10-rc1 on kernel-2.6.16.56
Chris Patch
chrispatch at intrstar.net
Thu Nov 1 21:12:08 EDT 2007
I tried to compile openswan-2.4.10rc1 on linux-2.6.16.56 today. These
are the errors I received.
/usr/src/linux-2.6 is a symlink to /usr/local/src/linux-2.6.16.56
I have aes blowfish and 3des from cryptoapi compiled into my kernel, and
I am using cryptoapi in my kernel .config instead of the 3des/aes in
openswan.
I did a make npatch and compiled the kernel with natt support with no
error.
After I rebooted to the kernel with nat-t support I did the following:
[root at soekris root]# cd /usr/local/src/openswan-2.4.10rc1
[root at soekris openswan-2.4.10rc1]# make kpatch
Now performing forward patches
make kernelpatch2.6 | tee /usr/src/linux-2.6/openswan.patch | (cd
/usr/src/linux-2.6 && patch -p1 -b -z .preipsec --forward
--ignore-whitespace )
patching file README.openswan-2
patching file crypto/ciphers/aes/test_main.c
patching file crypto/ciphers/aes/test_main_mac.c
patching file include/crypto/aes.h
patching file include/crypto/aes_cbc.h
patching file include/crypto/aes_xcbc_mac.h
patching file include/crypto/cbc_generic.h
patching file include/crypto/des.h
patching file include/des/des_locl.h
patching file include/des/des_ver.h
patching file include/des/podd.h
patching file include/des/sk.h
patching file include/des/spr.h
patching file include/mast.h
patching file include/openswan.h
patching file include/openswan/ipcomp.h
patching file include/openswan/ipsec_ah.h
patching file include/openswan/ipsec_alg.h
patching file include/openswan/ipsec_alg_3des.h
patching file include/openswan/ipsec_auth.h
patching file include/openswan/ipsec_encap.h
patching file include/openswan/ipsec_eroute.h
patching file include/openswan/ipsec_errs.h
patching file include/openswan/ipsec_esp.h
patching file include/openswan/ipsec_ipcomp.h
patching file include/openswan/ipsec_ipe4.h
patching file include/openswan/ipsec_ipip.h
patching file include/openswan/ipsec_kern24.h
patching file include/openswan/ipsec_kversion.h
patching file include/openswan/ipsec_life.h
patching file include/openswan/ipsec_md5h.h
patching file include/openswan/ipsec_param.h
patching file include/openswan/ipsec_policy.h
patching file include/openswan/ipsec_proto.h
patching file include/openswan/ipsec_radij.h
patching file include/openswan/ipsec_rcv.h
patching file include/openswan/ipsec_sa.h
patching file include/openswan/ipsec_sha1.h
patching file include/openswan/ipsec_stats.h
patching file include/openswan/ipsec_tunnel.h
patching file include/openswan/ipsec_xform.h
patching file include/openswan/ipsec_xmit.h
patching file include/openswan/passert.h
patching file include/openswan/pfkey_debug.h
patching file include/openswan/radij.h
patching file include/pfkey.h
patching file include/pfkeyv2.h
patching file include/zlib/zconf.h
patching file include/zlib/zlib.h
patching file include/zlib/zutil.h
patching file lib/libfreeswan/Makefile.objs
patching file lib/zlib/Makefile
patching file lib/zlib/Makefile.objs
patching file net/Kconfig
Hunk #1 succeeded at 226 (offset 11 lines).
patching file net/Makefile
Hunk #1 succeeded at 50 (offset 8 lines).
patching file net/ipsec/Kconfig
patching file net/ipsec/Makefile
patching file net/ipsec/README-zlib
patching file net/ipsec/README-zlib.freeswan
patching file net/ipsec/addrtoa.c
patching file net/ipsec/addrtot.c
patching file net/ipsec/addrtypeof.c
patching file net/ipsec/adler32.c
patching file net/ipsec/aes/Makefile
patching file net/ipsec/aes/aes-i586.S
patching file net/ipsec/aes/aes.c
patching file net/ipsec/aes/aes_cbc.c
patching file net/ipsec/aes/aes_xcbc_mac.c
patching file net/ipsec/aes/ipsec_alg_aes.c
patching file net/ipsec/alg/Config.alg_aes.in
patching file net/ipsec/alg/Config.alg_cryptoapi.in
patching file net/ipsec/alg/Config.in
patching file net/ipsec/alg/Makefile
patching file net/ipsec/alg/Makefile.alg_aes
patching file net/ipsec/alg/Makefile.alg_cryptoapi
patching file net/ipsec/alg/ipsec_alg_cryptoapi.c
patching file net/ipsec/alg/scripts/mk-static_init.c.sh
patching file net/ipsec/anyaddr.c
patching file net/ipsec/datatot.c
patching file net/ipsec/defconfig
patching file net/ipsec/deflate.c
patching file net/ipsec/deflate.h
patching file net/ipsec/des/COPYRIGHT
patching file net/ipsec/des/INSTALL
patching file net/ipsec/des/Makefile
patching file net/ipsec/des/README
patching file net/ipsec/des/README.freeswan
patching file net/ipsec/des/VERSION
patching file net/ipsec/des/asm/des-586.pl
patching file net/ipsec/des/asm/des686.pl
patching file net/ipsec/des/asm/desboth.pl
patching file net/ipsec/des/asm/readme
patching file net/ipsec/des/cbc_enc.c
patching file net/ipsec/des/des.doc
patching file net/ipsec/des/des_enc.c
patching file net/ipsec/des/des_opts.c
patching file net/ipsec/des/dx86unix.S
patching file net/ipsec/des/ecb_enc.c
patching file net/ipsec/des/ipsec_alg_3des.c
patching file net/ipsec/des/set_key.c
patching file net/ipsec/goodmask.c
patching file net/ipsec/infblock.c
patching file net/ipsec/infblock.h
patching file net/ipsec/infcodes.c
patching file net/ipsec/infcodes.h
patching file net/ipsec/inffast.c
patching file net/ipsec/inffast.h
patching file net/ipsec/inffixed.h
patching file net/ipsec/inflate.c
patching file net/ipsec/inftrees.c
patching file net/ipsec/inftrees.h
patching file net/ipsec/infutil.c
patching file net/ipsec/infutil.h
patching file net/ipsec/initaddr.c
patching file net/ipsec/ipcomp.c
patching file net/ipsec/ipsec_ah.c
patching file net/ipsec/ipsec_alg.c
patching file net/ipsec/ipsec_alg_cryptoapi.c
patching file net/ipsec/ipsec_esp.c
patching file net/ipsec/ipsec_init.c
patching file net/ipsec/ipsec_ipcomp.c
patching file net/ipsec/ipsec_ipip.c
patching file net/ipsec/ipsec_kern24.c
patching file net/ipsec/ipsec_life.c
patching file net/ipsec/ipsec_mast.c
patching file net/ipsec/ipsec_md5c.c
patching file net/ipsec/ipsec_proc.c
patching file net/ipsec/ipsec_radij.c
patching file net/ipsec/ipsec_rcv.c
patching file net/ipsec/ipsec_sa.c
patching file net/ipsec/ipsec_sha1.c
patching file net/ipsec/ipsec_snprintf.c
patching file net/ipsec/ipsec_tunnel.c
patching file net/ipsec/ipsec_xform.c
patching file net/ipsec/ipsec_xmit.c
patching file net/ipsec/match586.S
patching file net/ipsec/match686.S
patching file net/ipsec/null/ipsec_alg_null.c
patching file net/ipsec/pfkey_v2.c
patching file net/ipsec/pfkey_v2_build.c
patching file net/ipsec/pfkey_v2_debug.c
patching file net/ipsec/pfkey_v2_ext_bits.c
patching file net/ipsec/pfkey_v2_ext_process.c
patching file net/ipsec/pfkey_v2_parse.c
patching file net/ipsec/pfkey_v2_parser.c
patching file net/ipsec/prng.c
patching file net/ipsec/radij.c
patching file net/ipsec/rangetoa.c
patching file net/ipsec/satot.c
patching file net/ipsec/subnetof.c
patching file net/ipsec/subnettoa.c
patching file net/ipsec/sysctl_net_ipsec.c
patching file net/ipsec/trees.c
patching file net/ipsec/trees.h
patching file net/ipsec/ultoa.c
patching file net/ipsec/ultot.c
patching file net/ipsec/version.c
patching file net/ipsec/zutil.c
patching file net/ipv4/af_inet.c
Hunk #1 succeeded at 1222 (offset 53 lines).
patching file net/ipsec/Makefile.ver
+ cp -a /usr/src/linux-2.6/arch/i386/defconfig
/usr/src/linux-2.6/arch/i386/defconfig.orig
+ chmod u+w /usr/src/linux-2.6/arch/i386/defconfig
+ cat /usr/src/linux-2.6/arch/i386/defconfig
/usr/src/linux-2.6/net/ipsec/defconfig
+ rm -f /usr/src/linux-2.6/arch/i386/defconfig
+ cp -a /usr/src/linux-2.6/arch/i386/defconfig.tmp
/usr/src/linux-2.6/arch/i386/defconfig
+ rm -f /usr/src/linux-2.6/arch/i386/defconfig.tmp
+ egrep -q CONFIG_KLIPS /usr/src/linux-2.6/.config
+ set -x
+ cp -a /usr/src/linux-2.6/.config /usr/src/linux-2.6/.config.orig
+ chmod u+w /usr/src/linux-2.6/.config
+ cat /usr/src/linux-2.6/.config /usr/src/linux-2.6/net/ipsec/defconfig
+ rm -f /usr/src/linux-2.6/.config
+ cp -a /usr/src/linux-2.6/.config.tmp /usr/src/linux-2.6/.config
+ rm -f /usr/src/linux-2.6/.config.tmp
[root at soekris openswan-2.4.10rc1]#
[root at soekris openswan-2.4.10rc1]#
[root at soekris openswan-2.4.10rc1]#
[root at soekris openswan-2.4.10rc1]#
[root at soekris openswan-2.4.10rc1]#
[root at soekris openswan-2.4.10rc1]# cd ../linux-2.6.16.56/
[root at soekris linux-2.6.16.56]# make menuconfig
scripts/kconfig/mconf arch/i386/Kconfig
#
# using defaults found in .config
#
.config:1458:warning: trying to reassign symbol INET
.config:1462:warning: trying to assign nonexistent symbol IP_FORWARD
.config:1467:warning: trying to assign nonexistent symbol
IP_MASQUERADE_IPSEC
.config:1477:warning: trying to assign nonexistent symbol KLIPS_IPIP
.config:1490:warning: trying to assign nonexistent symbol KLIPS_ALG
.config:1507:warning: trying to reassign symbol IPSEC_NAT_TRAVERSAL
*** End of Linux kernel configuration.
*** Execute 'make' to build the kernel or try 'make help'.
[root at soekris linux-2.6.16.56]# make
CHK include/linux/version.h
SPLIT include/linux/autoconf.h -> include/config/*
CHK include/linux/compile.h
CHK usr/initramfs_list
GZIP kernel/config_data.gz
IKCFG kernel/config_data.h
CC kernel/configs.o
LD kernel/built-in.o
CC net/ipsec/ipsec_init.o
CC net/ipsec/ipsec_sa.o
CC net/ipsec/ipsec_radij.o
CC net/ipsec/radij.o
CC net/ipsec/ipsec_life.o
CC net/ipsec/ipsec_proc.o
CC net/ipsec/ipsec_tunnel.o
CC net/ipsec/ipsec_xmit.o
net/ipsec/ipsec_xmit.c: In function `ipsec_xmit_encap_bundle':
net/ipsec/ipsec_xmit.c:1343: `ixt_e' undeclared (first use in this
function)
net/ipsec/ipsec_xmit.c:1343: (Each undeclared identifier is reported
only once
net/ipsec/ipsec_xmit.c:1343: for each function it appears in.)
net/ipsec/ipsec_xmit.c:1345: `blocksize' undeclared (first use in this
function)
net/ipsec/ipsec_xmit.c:1354: `ixt_a' undeclared (first use in this
function)
make[2]: *** [net/ipsec/ipsec_xmit.o] Error 1
make[1]: *** [net/ipsec] Error 2
make: *** [net] Error 2
[root at soekris linux-2.6.16.56]#
Does anyone know what I am screwing up here?
More information about the Users
mailing list