Re: [Ocf-linux-users] Some questions about how to use OCF with linux kernel 2.6.31 native IPSec and Openswan

[David M. <Dav...@se...>]

Jivin mix.kao lays it down ...
> Thanks David,
> 
> So can i say if i need the IXP425 hardward crypto acceleration support
> I have two choices:
> 
> 1. Try to use the native IXP crypto that linux kernel 2.6.31 provided
> and use openswan as user space tool without KLIPS support?

Yes.

> 2. Try to compile the openswan-2.6.24rc5 using KLIPS and no need kernel
> patch provided by OCF group.

You need the OCD patch for the kernel,  you just don't need to patch
openswan.  Sorry for the confusion.

> Another question:
> I patched the 2.6.31 kernel with OCF, when i enabled the CONFIG_OCF_IXP4XX=m
> I got many compile errors when built OCF_IXP4XX.
> Is there anyone has any suggestion or anything i should prepare before
> compile the IXP4XX kernel module?

Do you have the Intel IXP access library ?  The ixp4xx OCF driver needs it.
You may need to adjust the Makefile in the ixp4xx directory to point to your
access library.

Cheers,
Davidm

> On 01/07/2010 07:54 PM, David McCullough wrote:
> > 
> > Jivin mix.kao lays it down ...
> >> Hi there,
> >>
> >> sorry for bothering, i have some questions need your help.
> >>
> >> 1. My platform is ARM with IXP425, can OCF, Openswan, and Linux kernel
> >> 2.6.31 with native IPSec stack support IXP425 crypto hardware
> >> acceleration? Or i have to use Openswan with KLIPS patch in kernel?
> > 
> > netkey (native ipsec stack) will not use OCF.  There is native IXP
> > crypto in 2.6.31.  I have't used it but we are looking at trying it out
> > soon.
> > 
> > For OCF,  use the latest openswan-2.6.24rc5 from openswan.org and you
> > shouldn't have to patch your kernel.
> > 
> >> 2. I have patched the OCF into Linux kernel, if i want to use IXP425
> >> hardware crypto acceleration, what kernel options should i enable?
> >> Attached screen shot is my kernel OCF config, is it correct or what
> >> options should i select?
> > 
> > The related options I run are:
> > 
> > 	CONFIG_KLIPS=m
> > 	CONFIG_KLIPS_ESP=y
> > 	CONFIG_KLIPS_AH=y
> > 	# CONFIG_KLIPS_AUTH_HMAC_MD5 is not set
> > 	# CONFIG_KLIPS_AUTH_HMAC_SHA1 is not set
> > 	# CONFIG_KLIPS_ALG is not set
> > 	# CONFIG_KLIPS_ENC_3DES is not set
> > 	CONFIG_KLIPS_IPCOMP=y
> > 	CONFIG_KLIPS_OCF=y
> > 	CONFIG_KLIPS_DEBUG=y
> > 	CONFIG_KLIPS_IF_MAX=4
> > 	CONFIG_OCF_OCF=m
> > 	# CONFIG_OCF_RANDOMHARVEST is not set
> > 	CONFIG_OCF_CRYPTODEV=m
> > 	# CONFIG_OCF_CRYPTOSOFT is not set
> > 	# CONFIG_OCF_SAFE is not set
> > 	CONFIG_OCF_IXP4XX=m
> > 	# CONFIG_OCF_IXP4XX_SHA1_MD5 is not set
> > 	# CONFIG_OCF_HIFN is not set
> > 	# CONFIG_OCF_HIFNHIPP is not set
> > 	# CONFIG_OCF_TALITOS is not set
> > 	# CONFIG_OCF_EP80579 is not set
> > 	# CONFIG_OCF_CRYPTOCTEON is not set
> > 	# CONFIG_OCF_OCFNULL is not set
> > 	# CONFIG_OCF_BENCH is not set
> > 
> > Cheers,
> > Davidm
> > 
> 
> 
> ------------------------------------------------------------------------------
> This SF.Net email is sponsored by the Verizon Developer Community
> Take advantage of Verizon's best-in-class app development support
> A streamlined, 14 day to market process makes app distribution fast and easy
> Join now and get one step closer to millions of Verizon customers
> http://p.sf.net/sfu/verizon-dev2dev 
> _______________________________________________
> Ocf-linux-users mailing list
> Ocf...@li...
> https://lists.sourceforge.net/lists/listinfo/ocf-linux-users
> 
> 

-- 
David McCullough,  dav...@se...,  Ph:+61 734352815
McAfee - SnapGear  http://www.snapgear.com                http://www.uCdot.org