Re: [Ocf-linux-users] Some questions about how to use OCF with linux kernel 2.6.31 native IPSec and Openswan

[mix.kao <mi...@ci...>]

Thanks David,

So can i say if i need the IXP425 hardward crypto acceleration support
I have two choices:

1. Try to use the native IXP crypto that linux kernel 2.6.31 provided
and use openswan as user space tool without KLIPS support?

2. Try to compile the openswan-2.6.24rc5 using KLIPS and no need kernel
patch provided by OCF group.

Another question:
I patched the 2.6.31 kernel with OCF, when i enabled the CONFIG_OCF_IXP4XX=m
I got many compile errors when built OCF_IXP4XX.
Is there anyone has any suggestion or anything i should prepare before
compile the IXP4XX kernel module?

best regards.

On 01/07/2010 07:54 PM, David McCullough wrote:
> 
> Jivin mix.kao lays it down ...
>> Hi there,
>>
>> sorry for bothering, i have some questions need your help.
>>
>> 1. My platform is ARM with IXP425, can OCF, Openswan, and Linux kernel
>> 2.6.31 with native IPSec stack support IXP425 crypto hardware
>> acceleration? Or i have to use Openswan with KLIPS patch in kernel?
> 
> netkey (native ipsec stack) will not use OCF.  There is native IXP
> crypto in 2.6.31.  I have't used it but we are looking at trying it out
> soon.
> 
> For OCF,  use the latest openswan-2.6.24rc5 from openswan.org and you
> shouldn't have to patch your kernel.
> 
>> 2. I have patched the OCF into Linux kernel, if i want to use IXP425
>> hardware crypto acceleration, what kernel options should i enable?
>> Attached screen shot is my kernel OCF config, is it correct or what
>> options should i select?
> 
> The related options I run are:
> 
> 	CONFIG_KLIPS=m
> 	CONFIG_KLIPS_ESP=y
> 	CONFIG_KLIPS_AH=y
> 	# CONFIG_KLIPS_AUTH_HMAC_MD5 is not set
> 	# CONFIG_KLIPS_AUTH_HMAC_SHA1 is not set
> 	# CONFIG_KLIPS_ALG is not set
> 	# CONFIG_KLIPS_ENC_3DES is not set
> 	CONFIG_KLIPS_IPCOMP=y
> 	CONFIG_KLIPS_OCF=y
> 	CONFIG_KLIPS_DEBUG=y
> 	CONFIG_KLIPS_IF_MAX=4
> 	CONFIG_OCF_OCF=m
> 	# CONFIG_OCF_RANDOMHARVEST is not set
> 	CONFIG_OCF_CRYPTODEV=m
> 	# CONFIG_OCF_CRYPTOSOFT is not set
> 	# CONFIG_OCF_SAFE is not set
> 	CONFIG_OCF_IXP4XX=m
> 	# CONFIG_OCF_IXP4XX_SHA1_MD5 is not set
> 	# CONFIG_OCF_HIFN is not set
> 	# CONFIG_OCF_HIFNHIPP is not set
> 	# CONFIG_OCF_TALITOS is not set
> 	# CONFIG_OCF_EP80579 is not set
> 	# CONFIG_OCF_CRYPTOCTEON is not set
> 	# CONFIG_OCF_OCFNULL is not set
> 	# CONFIG_OCF_BENCH is not set
> 
> Cheers,
> Davidm
>