[Openswan Users] pluto causes system out of memory when interop with fortigate.

[Paul Wouters]

On Mon, 16 Aug 2010, Jason Sigurdur wrote:

> > 2.6.20-1.2320.fc5 - openswan-2.4.4-1.1.2.1

Woah that's ancient!

> What version of openswan should I use, that would support an 2.6.20 fc5 kernel.

The latest openswan version, 2.6.28 should support that.

> Do I disable the fc5 version of openswan and recompile and install the new version?

download the tar.gz into /usr/src/redhat/SOURCES
then do:

cd /usr/src/redhat/SOURCES
tar zxf openswan-2.6.28.tar.gz
cd openswan-2.6.28
rpmbuild -ba packaging/fedora/openswan.spec
install the resulting binary rpm using: rpm -Uhv

If you use netkey, you are done. If you want klips, also do:
yum install kernel-devel
export KERNELSRC=/usr/src/kernels/pickyourkernelversion
make module module_install
and be sure to have "protostack=klips" in your ipsec.conf

Paul
>  
> 
> Thx jason
> 
> 
>