Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 8 Mar 1999 18:01:16 -0000
From:      Jerome Privat <jerome.privat@bt-sys.bt.co.uk>
To:        "'freebsd-security@FreeBSD.ORG'" <freebsd-security@FreeBSD.ORG>
Subject:   compiling IPSec
Message-ID:  <c=GB%a=_%p=BT%l=TB-PLUTO-990308180116Z-372@mussel.futures.bt.co.uk>

next in thread | raw e-mail | index | archive | help
Hi,
I'm currently trying to install an IPSec package in our 2.2.8 FreeBSD
boxes and I chose the Kame version. 

I downloaded the file kame-1999131-fbsd228-stable.tgz and followed all
the instructions contained in the kit/INSTALL. I applied the patch:
patch -p1 -f < $SOMEWHERE/kit/sys-228.diff
and then edit the IP6 conf file maintaining the option IPSEC.

'make depend' produces many warnings, all of the same kind, like:

../../netid/in.h:355: warning: IP_ESP_TRANS_LEVEL redefined
../../netid/in.h:351: this is the location of the previous definition

These warnings appear for several #define macro name like
IP_ESP_NETWORK_LEVEL,
IPSEC_LEVEL_BYPASS, etc. This is normal (and wrong I guess) because the
#ifdef IPSEC clause contains a second definition for all these macros
without putting them in #else.
Then the make depend exits with the 'Error code 1'.

Beeing a stable release, I guess I missed something. I've noticed that
at www.kame.net there is an include-1999131-fbsd228-stable.tgz:
should I include this one too? If yes, where to explode the tar file?

We would like to have IPSec for the IPv4 stack, somewhere on the mailing
lists I read it's sufficient ot mask the option "INET6". Is that enough?
(Btw the errors I got are with the above option in)

Tia
Jerome



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?c=GB%a=_%p=BT%l=TB-PLUTO-990308180116Z-372>