From owner-freebsd-current@FreeBSD.ORG Thu Sep 16 04:44:10 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DD00C16A4CE for ; Thu, 16 Sep 2004 04:44:09 +0000 (GMT) Received: from vimes.aminor.no (vimes.aminor.no [213.187.177.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3080F43D41 for ; Thu, 16 Sep 2004 04:44:09 +0000 (GMT) (envelope-from eivind@aminor.no) Received: from localhost (localhost.eivind [127.0.0.1]) by vimes.aminor.no (Postfix) with ESMTP id 0373D1704C; Thu, 16 Sep 2004 06:44:08 +0200 (CEST) Received: from vimes.aminor.no ([127.0.0.1]) by localhost (vimes.eivind [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 91781-02; Thu, 16 Sep 2004 06:44:06 +0200 (CEST) Received: from herkulesii (nextra-3-244.nextra.no [148.122.3.244]) by vimes.aminor.no (Postfix) with ESMTP id 794B617036; Thu, 16 Sep 2004 06:44:06 +0200 (CEST) Message-ID: <029401c49ba7$cc458b90$9c077a0a@ttyl.internal> From: "Eivind Olsen" To: "Bruce M Simpson" References: <01e301c49b94$1cbfbf50$9c077a0a@ttyl.internal> <20040916030942.GB10318@empiric.icir.org> Date: Thu, 16 Sep 2004 06:44:05 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1437 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 X-Virus-Scanned: by amavisd-new at aminor.no cc: freebsd-current@FreeBSD.org Subject: Re: RELENG_5 Compile problems when using FAST_IPSEC? X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Sep 2004 04:44:10 -0000 > > I'm having problems compiling a RELENG_5 kernel if I add FAST_IPSEC to it. > It looks like you didn't include 'device crypto'. I've done some more testing: First, I added the following lines to GENERIC, and the kernel compiled fine: options FAST_IPSEC #new IPsec (cannot define w/ IPSEC) device crypto # core crypto support device cryptodev # /dev/crypto for access to h/w device rndtest # FIPS 140-2 entropy tester device hifn # Hifn 7951, 7781, etc. options HIFN_DEBUG # enable debugging support: hw.hifn.debug options HIFN_RNDTEST # enable rndtest support Then, I added: device pf #PF OpenBSD packet-filter firewall device pflog #logging support interface for PF device pfsync #synchronization interface for PF and I got the following error: cc -c -O -pipe -march=pentium3 -Wall -Wredundant-decls -Wnested-externs -Wst rict-prototypes -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual -fformat-extensions -std=c99 -nostdinc -I- -I. -I/usr/src/sys -I/usr/src/s ys/contrib/dev/acpica -I/usr/src/sys/contrib/altq -I/usr/src/sys/contrib/ipf ilter -I/usr/src/sys/contrib/pf -I/usr/src/sys/contrib/dev/ath -I/usr/src/sy s/contrib/dev/ath/freebsd -I/usr/src/sys/contrib/ngatm -D_KERNEL -include opt_global.h -fno-common -finline-limit=8000 --param inline-unit-growth=100 --param arge-function-growth=1000 -mno-align-long-strings -mpreferred-stack-boundar y=2 -ffreestanding -Werror /usr/src/sys/netinet/ip_id.c cc -c -O -pipe -march=pentium3 -Wall -Wredundant-decls -Wnested-externs -Wst rict-prototypes -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual -fformat-extensions -std=c99 -nostdinc -I- -I. -I/usr/src/sys -I/usr/src/s ys/contrib/dev/acpica -I/usr/src/sys/contrib/altq -I/usr/src/sys/contrib/ipf ilter -I/usr/src/sys/contrib/pf -I/usr/src/sys/contrib/dev/ath -I/usr/src/sy s/contrib/dev/ath/freebsd -I/usr/src/sys/contrib/ngatm -D_KERNEL -include opt_global.h -fno-common -finline-limit=8000 --param inline-unit-growth=100 --param arge-function-growth=1000 -mno-align-long-strings -mpreferred-stack-boundar y=2 -ffreestanding -Werror /usr/src/sys/netinet/in_pcb.c cc -c -O -pipe -march=pentium3 -Wall -Wredundant-decls -Wnested-externs -Wst rict-prototypes -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual -fformat-extensions -std=c99 -nostdinc -I- -I. -I/usr/src/sys -I/usr/src/s ys/contrib/dev/acpica -I/usr/src/sys/contrib/altq -I/usr/src/sys/contrib/ipf ilter -I/usr/src/sys/contrib/pf -I/usr/src/sys/contrib/dev/ath -I/usr/src/sy s/contrib/dev/ath/freebsd -I/usr/src/sys/contrib/ngatm -D_KERNEL -include opt_global.h -fno-common -finline-limit=8000 --param inline-unit-growth=100 --param arge-function-growth=1000 -mno-align-long-strings -mpreferred-stack-boundar y=2 -ffreestanding -Werror /usr/src/sys/netinet/in_proto.c In file included from /usr/src/sys/netinet/in_proto.c:91: /usr/src/sys/contrib/pf/net/pfvar.h:57: error: redefinition of `union sockaddr_union' *** Error code 1 Stop in /usr/obj/usr/src/sys/VIMES. *** Error code 1 Stop in /usr/src. *** Error code 1 Stop in /usr/src. Finally, I commented out the FAST_IPSEC line, and the kernel compiled fine again. Looks like there might be something odd with pf + FAST_IPSEC? Or am I misinterpreting things here? -- Regards Eivind Olsen