[Openswan Users] build openswan 2.6.26 rpm with klips kernel module

[Steve Zeng]

Thanks, Michael. I am looking for a .spec file to build openswan rpm with klips included. The reason for klips is, I have a problem related to routing (I think) when trying openswan with amazon VPC. What I've been given regarding the IPSec tunnel is:

My_network (192.168.1.0/24) 
       ||
my IPSec VPN gateway (tunnel interface: 169.254.255.2)
       ||  
    Internet
       ||  
Amazon VPN gateway   (tunnel interface: 169.254.255.1)
       ||  
vpc (10.0.0.0/24)

with netkey I have difficulty to implement the routing. My understanding is,  klips will give me a tunnel interface and so I can ajust my routing table to let all traffic to 10.0.0.0/24 go through the tunnel interface. Correct me if I am wrong. 

Steve
 

-----Original Message-----
From: Michael H. Warfield [mailto:mhw at WittsEnd.com] 
Sent: May 27, 2010 6:43 PM
To: Steve Zeng
Cc: mhw at WittsEnd.com; Users at openswan.org
Subject: Re: [Openswan Users] build openswan 2.6.26 rpm with klips kernel module

On Thu, 2010-05-27 at 17:05 -0700, Steve Zeng wrote: 
> Anybody has a spec file available to build openswan-2.6.26 rpm with klips kernel module on redhat/Centos/Fedora?

When you said "spec" file, I presumed you mean the .spec file for building rpm's, especially since you then mentioned Fedora and Redhat.
I realized later, you didn't really refer to building rpms per se.  Are you building rpm's or what "spec" file do you mean?

> I tried to run "make KERNELSRC=/lib/modules/`uname -r`/build module minstall" but get the following errors:
> 
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c: In function âipsec_tunnel_hard_headerâ:
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1072: 
> error: implicit declaration of function âip_hdrâ
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1072: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1072: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1072: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1072: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1072: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1072: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1098: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1098: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1098: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1098: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1098: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1098: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c: In function âipsec_tunnel_rebuild_headerâ:
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1174: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1174: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1174: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1174: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1174: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1174: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1193: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1193: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1193: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1193: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1193: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1193: 
> error: invalid type argument of â->â
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c: In function âipsec_tunnel_cache_updateâ:
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1327: 
> warning: passing argument 1 of ânetdev_privâ discards qualifiers from 
> pointer target type
> /usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.c:1376: 
> warning: passing argument 3 of âprv->header_cache_updateâ discards 
> qualifiers from pointer target type
> make[3]: *** 
> [/usr/src/redhat/BUILD/openswan-2.6.26/modobj26/ipsec_tunnel.o] Error 
> 1
> make[2]: *** [_module_/usr/src/redhat/BUILD/openswan-2.6.26/modobj26] 
> Error 2
> make[2]: Leaving directory `/usr/src/kernels/2.6.18-53.el5-i686'
> make[1]: *** [module26] Error 2
> make[1]: Leaving directory `/usr/src/redhat/BUILD/openswan-2.6.26'
> make: *** [module] Error 2
> 
> Thanks in advance. 
> 
> Steve

Mike
--
Michael H. Warfield (AI4NB) | (770) 985-6132 |  mhw at WittsEnd.com
   /\/\|=mhw=|\/\/          | (678) 463-0932 |  http://www.wittsend.com/mhw/
   NIC whois: MHW9          | An optimist believes we live in the best of all
 PGP Key: 0x674627FF        | possible worlds.  A pessimist is sure of it!