[Openswan Users] pluto causes system out of memory when interop with fortigate. [Spam score:8%]

[Jason Sigurdur]

Hi, 

I copied openswan-2.6.28.tar.gz to /usr/src/redhat/SOURCES
tar xvzf openswan-2.6.28.tar.gz
uncommented -DLEAK_DETECTIVE in the  /usr/src/redhat/SOURCES/openswan-2.6.28/programs/pluto/Makefile.options

DEFINES = $(EXTRA_DEFINES) \
        $(IPSECPOLICY_DEFINES) ${VENDORID} \
        $(KEYRR_DEFINES) \
        $(BYTE_ORDER) \
        $(LWRESDEF) \
        $(DYNAMICDNSDEF) \
        $(NETKEY_DEFS) \
        $(X509_DEFS) \
        ${EXTRA_CRYPTO_DEFS} \
        $(HAVE_THREADS_DEFS) \
        -DPLUTO \
        ${KLIPS_DEFS} ${WIN2K_DEFS} ${TPM_DEFS} ${MAST_DEFS} ${BSDKAME_DEFS} \
        -DBUILDER=\"${BUILDER}\" \
        -DDEBUG \
        -DGCC_LINT \
        -DUSE_AES -DUSE_3DES \
        -DIKE_ALG -DKERNEL_ALG \
        ${AGGRESSIVE_DEFS} \
        ${XAUTH_DEFS} ${XAUTHPAM_DEFS} \
        ${NAT_DEFS} ${CURL_DEFS}\
        ${WEAK_DEFS} \
        ${SINGLE_CONF_DIR} \
        ${HAVE_STATSD_DEFS} \
        ${IPSEC_CONNECTION_LIMIT_DEFS} \
         -DLEAK_DETECTIVE


tar -cvzf openswan-2.6.28.tar.gz openswan-2.6.28
now in the SOURCES directory I have a  openswan-2.6.28.tar.gz  and openswan-2.6.28
cd openswan-2.6.28
rpmbuild -ba packaging/fedora/openswan.spec
/usr/src/redhat/RPMS/x86_64
rpm -ivh --force openswan-2.6.28.rpm

then a ipsec setup restart


I hope I got it right?

jason
 
-----Original Message-----
From: Paul Wouters [mailto:paul at xelerance.com] 
Sent: Monday, August 23, 2010 9:59 PM
To: Jason Sigurdur
Cc: users at openswan.org
Subject: RE: [Openswan Users] pluto causes system out of memory when interop with fortigate. [Spam score:8%]

On Mon, 23 Aug 2010, Jason Sigurdur wrote:

> Do I have to tar up the source contents after I  make the change?

Yes, because rpmbuild as part of the building process will grab the source in SOURCES and untars it in BUILD. (and modifying BUILD wont work, it is rm -rf'ed before every build to guarantee it starts from scratch)

Paul