[Openswan Users] Openswan + OCF

[David McCullough]

Jivin farajian amin lays it down ...
> Dear All,
> 
> As i noticed there are two ways for inclusion of HW cryprography in openswan.
> 1-   using openswan 2.6.x releases + some patches ??
> 2-  using openswan-3.0.x releases 
> 
> Currently we are running openswan2.6.19 with NETKEY on a sparc processor with a cryptoengine.
> 
> My questions are :
> 1-  is NETKEY compatible with OCF , or we must compile openswan and patch kernel for KLIPS?

No,  it uses the kernel crypto API.

> 2-  The latest OCF patch is for openswan2.6.16dr5 ,   what about our openswan 2.6.19?

OCF is fully integrated into openswan 2.6 with klips (2.6.22 would be the
best place to start).

> 2- What are openswan-3.0.x releases for??

That was the initial work with openswan and OCF.  Most if not all the things
tried there are now in 2.6.22 and the 3.0 releases are old and out of date
and should not be used.

Cheers,
Davidm

-- 
David McCullough,  david_mccullough at securecomputing.com,  Ph:+61 734352815
McAfee - SnapGear  http://www.snapgear.com                http://www.uCdot.org