[Openswan Users] KLIPS (2.4.11) & Kernel make issues

[Toby Heywood]

Hi,

I have an update on my current progress but would still appreciate any
assistance.

I have downloaded the kernel source (2.6.22) from www.kernel.org and
OpenSwan KLIPS and NAT-T patches (2.4.12). patched the kernel source,
updated the .config file.  When running make, I receive the following
error message:

  CC      net/ipsec/ipsec_init.o
  CC      net/ipsec/ipsec_sa.o
  CC      net/ipsec/ipsec_radij.o
  CC      net/ipsec/radij.o
  CC      net/ipsec/ipsec_life.o
  CC      net/ipsec/ipsec_proc.o
  CC      net/ipsec/ipsec_tunnel.o
  CC      net/ipsec/ipsec_xmit.o
  CC      net/ipsec/ipsec_rcv.o
  CC      net/ipsec/ipsec_ipip.o
  CC      net/ipsec/ipsec_snprintf.o
  CC      net/ipsec/sysctl_net_ipsec.o
  CC      net/ipsec/pfkey_v2.o
  CC      net/ipsec/pfkey_v2_parser.o
  CC      net/ipsec/pfkey_v2_ext_process.o
make[2]: *** No rule to make target `net/ipsec/version.o', needed by
`net/ipsec/ipsec.o'.  Stop.
make[1]: *** [net/ipsec] Error 2
make: *** [net] Error 2

Can anyone tell me what needs to be put in the Makefile to get this to
work?  Should I use the kpatch option instead of using the patch
provided on the openswan website?

Thank you in advance.

Regards

Toby

Toby Heywood wrote:
> Hi,
>
> I have been experiencing difficulties in patch the 2.6 kernel with KLIPS.
>
> Initially I tried to create a custom kernel rpm which included klips as 
> default (I followed the instructions here: 
> http://fedoraproject.org/wiki/Docs/CustomKernel).  Due to the number of 
> issues I experienced whilst trying to create the custom rpm, I gave up 
> and decided to look at creating a custom kernel the normal way.
>
> I downloaded kernel 2.6.22 source and the OpenSwan KLIPS patch 
> (2.4.12rc3), patched the kernel and ran make.  I then received the 
> following error message;
>
>   CC      net/ipsec/ipsec_init.o
>   CC      net/ipsec/ipsec_sa.o
>   CC      net/ipsec/ipsec_radij.o
>   CC      net/ipsec/radij.o
>   CC      net/ipsec/ipsec_life.o
>   CC      net/ipsec/ipsec_proc.o
>   CC      net/ipsec/ipsec_tunnel.o
>   CC      net/ipsec/ipsec_xmit.o
> net/ipsec/ipsec_xmit.c: In function ‘ipsec_xmit_encap_bundle’:
> net/ipsec/ipsec_xmit.c:1343: error: ‘ixt_e’ undeclared (first use in 
> this function)
> net/ipsec/ipsec_xmit.c:1343: error: (Each undeclared identifier is 
> reported only once
> net/ipsec/ipsec_xmit.c:1343: error: for each function it appears in.)
> net/ipsec/ipsec_xmit.c:1345: error: ‘blocksize’ undeclared (first use in 
> this function)
> net/ipsec/ipsec_xmit.c:1354: error: ‘ixt_a’ undeclared (first use in 
> this function)
> make[2]: *** [net/ipsec/ipsec_xmit.o] Error 1
> make[1]: *** [net/ipsec] Error 2
> make: *** [net] Error 2
>
> I assumed (a result of past experience) that maybe the 2.6.22 kernel was 
> a bit new, so I downloaded a kernel version  I knew I had previously got 
> working 2.6.18.1. Applied the patch and ended up with the same result. I 
> have also tried 2.4.11 version of KLIPS patch.
>
> Could someone please advise on what steps I can take? I have googled 
> this and seen reference to changing the KLIPSCOMPILE= in Makefile.inc 
> (the change is already there as using 2.4.11).
>
> I am using Fedora 7, but had originally started out with Fedora 8, and 
> then downgrade as I believe there maybe issues with KLIPS/Fedora 8.
>
> Regards
>
> TH
>
> ________________________________________________________________________
> Alaric Systems Ltd. Registered in England No. 3314005 Registered Office:
> 108 Linton House, 164-180 Union Street, London SE1 0LH
>
> ________________________________________________________________________
> This e-mail has been scanned for all known viruses by Star. The
> service is powered by MessageLabs.
> _______________________________________________
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> Building and Integrating Virtual Private Networks with Openswan: 
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
>   

-- 
Toby Heywood
Infrastructure Consultant
Alaric Systems Ltd

T: +44 (0) 1535 680000
F: +44 (0) 1535 610223
E: theywood at alaric.com
W: www.alaric.com


________________________________________________________________________
Alaric Systems Ltd. Registered in England No. 3314005 Registered Office:
108 Linton House, 164-180 Union Street, London SE1 0LH

________________________________________________________________________
This e-mail has been scanned for all known viruses by Star. The
service is powered by MessageLabs.