[Openswan Users] Kernel Error was:[Re: Kernel-2.6.27 and nat-t patch]

[Paul Wouters]

On Mon, 29 Jun 2009, Sasa wrote:

> Hi, I have tried with openswan.2.4.15 with kernel-2.6.27 but I have the same 
> error:
>
> LD      net/ipsec/built-in.o
> CC [M]  net/ipsec/ipsec_init.o
> In file included from net/ipsec/ipsec_init.c:86:
> include/openswan/ipsec_esp.h:52: error: expected specifier-qualifier-list 
> before 'des_key_schedule'
> make[2]: *** [net/ipsec/ipsec_init.o] Error 1
> make[1]: *** [net/ipsec] Error 2
> make: *** [net] Error 2
>
> What kernel and osw version I can use for my purpose with nat-t, klips and 
> xl2tp ??

The situation has not changed since I answered this last time. You can look
at 2.6.22 code changes to backport to 2.4.x if you really need that new a kernel.
Most of it should be in ipsec_kversion.h which you can just replace. Then some
#ifdef's based on ipsec_kversion might need to be ported, but those are easilly
located based on the errors you get and looking at the 2.6 code.

We do not have the resources (or desire) to keep maintaining 2.4.x for new kernels.

I am sorry that bug 1004 has taken too long to get resolved. With that fixed, we
can truly retire the 2.4.x series.

Paul