Re: IPsec & FreeS/WAN

[Antony Stone <Antony@Soft-Solutions.co.uk>]

On Wednesday 03 July 2002 8:01 pm, Ross Vandegrift wrote:

> > > I'd rather use IPSEC if I can only just compile my damn kernel right
> > > for once.. (it's been a while)..
> >
> > FreeS/WAN isn't difficult - it just takes a while, and you have to follow
> > the instructions carefully.   I think the guides and documentation on
> > http://www.freeswan.org are very good, though.
>
> Does anyone distribute the FreeS/WAN kernel code as a patch instead of
> the crazy scriptish system they use?  I've never been able to get that
> part working without many hours of fudging.  And after that, I'd *never*
> want to have to do it again.  OTOH, if someone had a way to make diffs,
> that would be very easy.

What kernel source do you start from ?

I haven't had any problems using FreeS/WAN's method of patching / modifying 
the kernel source, but suppose someone did that on their machine and then 
sent you a set of diff files - if you can't get the FreeS/WAN system to work, 
surely you wouldn't be able to apply the diffs to your kernel source either ?

Do the problems you get suggest that the FreeS/WAN system can't find the 
right files to update, or it can't find the tools on your machine to do the 
updating with ?

The only thing I've ever had to load separately to get FreeS/WAN working is 
the gmp maths library.   I use the Slackware distro.

 

Antony.