[Ipsec-tools-devel] Re: generate_policy problem with 0.4rc1

[Christian K. <ka...@we...>]

Right, I'm using l2tp... I tried to compile the cvs22040922 but it ends
with:
gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I./../libipsec   -I/include
-I./../../src/racoon/missing -include ../../src/include-glibc/glibc-bugs.h
-I../../src/include-glibc -DSYSCONFDIR=\"/etc\" -g -O2  -Wall -Werror
-Wno-unused -c -o cfparse.o cfparse.c
y.tab.c: In Funktion >yyparse<:
y.tab.c:1196: Warnung: suggest parentheses around assignment used as truth
value
make[3]: *** [cfparse.o] Fehler 1
make[3]: Leaving directory `/usr/src/ipsec-tools-0.5cvs20040922/src/racoon'
make[2]: *** [all-recursive] Fehler 1

Here's my sp.conf:
#!/usr/sbin/setkey -f
# Security Policy
flush;
spdflush;
 
spdadd 10.0.1.33 10.0.1.22 gre -P in ipsec
    esp/transport//require;
spdadd 10.0.1.22 10.0.1.33 gre -P out ipsec
    esp/transport//require;
spdadd 10.0.1.33 10.0.1.22 tcp -P in ipsec
    esp/transport//require;
spdadd 10.0.1.22[1723] 10.0.1.33 tcp -P out ipsec
    esp/transport//require;
 
and the racoon.conf:
path certificate "/etc/ssl/certs";
remote anonymous
{
        exchange_mode main;
        generate_policy on;
        passive on;
        certificate_type x509 "server-signed.pem" "server-key.pem";
        my_identifier asn1dn;
        peers_identifier asn1dn;
        verify_cert off;
        proposal {
                dh_group modp1024;
                encryption_algorithm 3des;
                hash_algorithm sha1;
                authentication_method rsasig;
        }
        proposal_check obey;
}
sainfo anonymous
{
        encryption_algorithm 3des;
        authentication_algorithm hmac_md5;
        compression_algorithm deflate;
}
 
Thx, Chris