[Openswan Users] CentOS 5.3 and klips

[Paul Wouters]

On Thu, 20 Aug 2009, Maverick wrote:

> I would like to know if it's possible o use klips in CentOS 5.3 and how to
> do it?

Yes. Hopefully soon we'll build a kmod package. For now, do:

yum install kernel-devel
tar zxvf openswan-2.6.22.tar.gz
cd openswan-2.6.22
export KERNELSRC=/usr/src/kernel/YourVersion
make module 
sudo make module_install

You do not need any nat-t patches. You do not need to rebuild your
kernel.

Change /etc/ipsec.conf to have protostack=klips and service ipsec restart

Paul