Re: [Ocf-linux-users] NETKEY and OCF-Linux under 2.6.24

[David M. <Dav...@se...>]

Jivin xianghua xiao lays it down ...
...
> Yes I would like to try your alpha tarball right away. I managed to get 
> KLIPS compiled under 2.6.24 but it crashes sometimes, plus pluto 
> complained "no hardware accelerator was found".

Ok,  here is everything I think you need and is easiest to generate.
It's a openswan-2.4.12 patch and a diff against the old 2007 release of
OCF.  Ince you have openssl working I don't think you need a new version
of that patch.

This is not as nicely packaged as a release,  but I think you will be
able to work out what you need, if not hassle me :-)

> Hope someday NETKEY can invoke OCF directly, that will make life easier. 

Or some writes crypto drivers for linux for the HW you are using :-)

> There are quite a lot legacy network code in OpenSwan (partially due to 
> its back-compatibility support) and it's  becoming harder to keep KLIPS 
> in sync with new kernel releases.

It's not too bad actually,  we update kernels regularly and while
openswan is often an issue,  it's not always the worst offender :-)

Cheers,
Davidm

-- 
David McCullough,  dav...@se...,   Ph:+61 734352815
Secure Computing - SnapGear  http://www.uCdot.org   http://www.snapgear.com