[Openswan Users] Debian 6.0 Klips Saref

[Vincent Tamet]

Hi,
I'm looking to use openswan-2.6.38 klips with SAref support.

Already success with an ubuntu server, but with the debian, I miss something.

Could you help me to find the right way to do this ?




Maybe because I can't find Klips patch for kernel linux-source-2.6.32 ?
In fact I compile openswan like what:
  cd openswan-2.6.38/
  make programs
  make KERNELSRC=/lib/modules/`uname -r`/build module
  make KERNELSRC=/lib/modules/`uname -r`/build install minstall

Is compile the kernel with :
 patch -p1 < /openswan/patches/kernel/2.6.32/0001-SAREF-add-support-for-SA-selection-through-sendmsg.patch
 patch -p1 < /openswan/patches/kernel/2.6.32/0002-SAREF-implement-IP_IPSEC_BINDREF.patch

ipsec verify:
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path                                 [OK]
Linux Openswan 2.6.38 (klips)
Checking for IPsec support in kernel                            [OK]
 KLIPS: checking for NAT Traversal support                      [OK]
 KLIPS: checking for OCF crypto offload support                 [N/A]
 SAref kernel support                                           [N/A]
Checking that pluto is running                                  [OK]
 Pluto listening for IKE on udp 500                             [OK]
 Pluto listening for NAT-T on udp 4500                          [OK]

Best regards.