Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 04 Oct 2022 08:53:04 +0000
From:      alfadev <alfadev@protonmail.com>
To:        "freebsd-current@FreeBSD.org" <freebsd-current@FreeBSD.org>
Subject:   How to Enable support for IPsec deprecated algorithms: 3DES, MD5-HMAC
Message-ID:  <FrYE0Wy9SlEb4a6GfDGsEjms1MiVhEhVcWwdvc0SvLck_mxAfGwY4DwXYdzZajZrMxuqkho6pRa5rbwXDJUA39ZlYwJuGuHX4YmXOT-Medw=@protonmail.com>

index | next in thread | raw e-mail

[-- Attachment #1 --]
Hi, i am trying to move my gateway from FreeBSD 11.0 to FreeBSD 14.0 to use
newly added ipfw table lookup for mac addresses (https://reviews.freebsd.org/D35103)

Also I have too many IPSec connections between fortigate, cisco etc.
And their operators use only 3DES algorithms and they have no intention to change it for me.
So, now i have to enable 3DES support for FreeBSD 14.0 .

To add 3DES support again i changed some files shown below.
I am not sure what i did any help welcomes.

i restored below files:

https://cgit.freebsd.org/src/commit/?id=16aabb761c0a

-rw-r--r--	[lib/libipsec/pfkey_dump.c](https://cgit.freebsd.org/src/diff/lib/libipsec/pfkey_dump.c?id=16aabb761c0a)	25

-rw-r--r--	[sbin/setkey/sample.cf](https://cgit.freebsd.org/src/diff/sbin/setkey/sample.cf?id=16aabb761c0a)	79

-rw-r--r--	[sbin/setkey/setkey.8](https://cgit.freebsd.org/src/diff/sbin/setkey/setkey.8?id=16aabb761c0a)	29

-rw-r--r--	[sbin/setkey/test-pfkey.c](https://cgit.freebsd.org/src/diff/sbin/setkey/test-pfkey.c?id=16aabb761c0a)	32

-rw-r--r--	[sbin/setkey/token.l](https://cgit.freebsd.org/src/diff/sbin/setkey/token.l?id=16aabb761c0a)	11

-rw-r--r--	[sys/netipsec/ipsec.c](https://cgit.freebsd.org/src/diff/sys/netipsec/ipsec.c?id=16aabb761c0a)	5

-rw-r--r--	[sys/netipsec/ipsec.h](https://cgit.freebsd.org/src/diff/sys/netipsec/ipsec.h?id=16aabb761c0a)	2

-rw-r--r--	[sys/netipsec/key.c](https://cgit.freebsd.org/src/diff/sys/netipsec/key.c?id=16aabb761c0a)	12

-rw-r--r--	[sys/netipsec/xform_ah.c](https://cgit.freebsd.org/src/diff/sys/netipsec/xform_ah.c?id=16aabb761c0a)	26

-rw-r--r--	[sys/netipsec/xform_esp.c](https://cgit.freebsd.org/src/diff/sys/netipsec/xform_esp.c?id=16aabb761c0a)	25

-rw-r--r--	[usr.bin/netstat/ipsec.c](https://cgit.freebsd.org/src/diff/usr.bin/netstat/ipsec.c?id=16aabb761c0a)

https://cgit.freebsd.org/src/commit/?id=6c80c319ef88

-rw-r--r--	[sys/opencrypto/cryptodev.c](https://cgit.freebsd.org/src/diff/sys/opencrypto/cryptodev.c?id=6c80c319ef88)
-rw-r--r--	[sys/opencrypto/cryptodev.](https://cgit.freebsd.org/src/diff/sys/opencrypto/cryptodev.c?id=6c80c319ef88)h

Compiled New Kernel with this extra options:

# OWNKERNv1
include GENERICident OWNKERNv1

options IPFIREWALL
options DUMMYNET
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPDIVERT
options IPSEC
options IPSEC_SUPPORT
device crypto

cd /usr/src
make -j$(sysctl -n hw.ncpu) buildkernel KERNCONF=OWNKERNv1

But When i try to compile new kernel it gets too many errors.
any help will be appreciated at this point..

Part of Error Logs:
-- all_subdir_cryptodev ---
/usr/src/sys/opencrypto/cryptodev.c:314:16: error: incompatible function pointer types initializing 'fo_stat_t *' (aka 'int (*)(struct file *, struct stat *, struct ucred *)') with an expression of type 'int (struct file *, struct stat *, struct ucred *, struct thread *)' [-Werror,-Wincompatible-function-pointer-types]
.fo_stat = cryptof_stat,
^~~~~~~~~~~~
/usr/src/sys/opencrypto/cryptodev.c:412:14: error: use of undeclared identifier 'enc_xform_des'; did you mean 'enc_xform_ccm'?
txform = &enc_xform_des;
^~~~~~~~~~~~~
enc_xform_ccm
/usr/src/sys/opencrypto/xform_enc.h:105:31: note: 'enc_xform_ccm' declared here
extern const struct enc_xform enc_xform_ccm;
^
/usr/src/sys/opencrypto/cryptodev.c:415:14: error: use of undeclared identifier 'enc_xform_3des'
txform = &enc_xform_3des;
^...
[-- Attachment #2 --]
<div style="font-family: Arial; font-size: 14px;"><span style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre">Hi, i am trying to move my gateway from <span style="background-color:rgb(255, 255, 255);display:inline !important">FreeBSD 11.0 to </span>FreeBSD 14.0 to use</span></font></span><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre">newly added ipfw table lookup for mac addresses (<span><a href="https://reviews.freebsd.org/D35103" rel="noreferrer nofollow noopener" target="_blank" style="color:var(--interaction-norm);text-decoration:underline;cursor:pointer">https://reviews.freebsd.org/D35103</a>)</span></span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><br></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre">Also I have too many IPSec connections between fortigate, cisco etc. </span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre">And their operators use only 3DES algorithms and they have no intention to change it for me.</span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre">So, now i have to enable 3DES support for FreeBSD 14.0 .</span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre"><br></span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre">To add 3DES support again i changed some files shown below.</span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre">I am not sure what i did any help welcomes.</span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre"><br></span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre">i restored below files:</span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre"><br></span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre"><span><a href="https://cgit.freebsd.org/src/commit/?id=16aabb761c0a" rel="noreferrer nofollow noopener" target="_blank" style="color:var(--interaction-norm);text-decoration:underline;cursor:pointer">https://cgit.freebsd.org/src/commit/?id=16aabb761c0a</a></span><br></span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre"><table style="margin-bottom:0px;table-layout:auto;border-collapse:collapse;border:1px solid rgb(170, 170, 170);background-color:rgb(238, 238, 238);font-family:sans-serif;white-space:normal"><tbody><tr><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;white-space:nowrap">-rw-r--r--</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none"><a href="https://cgit.freebsd.org/src/diff/lib/libipsec/pfkey_dump.c?id=16aabb761c0a" rel="noreferrer nofollow noopener" target="_blank" style="color:blue;text-decoration:underline;cursor:pointer">lib/libipsec/pfkey_dump.c</a></td><td style="font-size:1em;margin:0px;text-align:right;padding:0.2em 0.2em 0.1em 0.1em;border:none">25</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;width:500px;vertical-align:middle"><table width="79%" style="margin-bottom:0px;table-layout:auto;border-collapse:collapse;border:none"><tbody><tr><td style="margin:0px;height:7pt;background-color:rgb(85, 204, 85);width:0px"></td><td style="margin:0px;height:7pt;background-color:rgb(204, 85, 85);width:124.812px"></td><td style="margin:0px;height:7pt;width:270.188px"></td></tr></tbody></table></td></tr><tr><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;white-space:nowrap">-rw-r--r--</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none"><a href="https://cgit.freebsd.org/src/diff/sbin/setkey/sample.cf?id=16aabb761c0a" rel="noreferrer nofollow noopener" target="_blank" style="color:blue;text-decoration:underline;cursor:pointer">sbin/setkey/sample.cf</a></td><td style="font-size:1em;margin:0px;text-align:right;padding:0.2em 0.2em 0.1em 0.1em;border:none">79</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;width:500px;vertical-align:middle"><table width="79%" style="margin-bottom:0px;table-layout:auto;border-collapse:collapse;border:none"><tbody><tr><td style="margin:0px;height:7pt;background-color:rgb(85, 204, 85);width:159.969px"></td><td style="margin:0px;height:7pt;background-color:rgb(204, 85, 85);width:235.016px"></td><td style="margin:0px;height:7pt;width:0.015625px"></td></tr></tbody></table></td></tr><tr><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;white-space:nowrap">-rw-r--r--</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none"><a href="https://cgit.freebsd.org/src/diff/sbin/setkey/setkey.8?id=16aabb761c0a" rel="noreferrer nofollow noopener" target="_blank" style="color:blue;text-decoration:underline;cursor:pointer">sbin/setkey/setkey.8</a></td><td style="font-size:1em;margin:0px;text-align:right;padding:0.2em 0.2em 0.1em 0.1em;border:none">29</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;width:500px;vertical-align:middle"><table width="79%" style="margin-bottom:0px;table-layout:auto;border-collapse:collapse;border:none"><tbody><tr><td style="margin:0px;height:7pt;background-color:rgb(85, 204, 85);width:20.1406px"></td><td style="margin:0px;height:7pt;background-color:rgb(204, 85, 85);width:124.812px"></td><td style="margin:0px;height:7pt;width:250.047px"></td></tr></tbody></table></td></tr><tr><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;white-space:nowrap">-rw-r--r--</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none"><a href="https://cgit.freebsd.org/src/diff/sbin/setkey/test-pfkey.c?id=16aabb761c0a" rel="noreferrer nofollow noopener" target="_blank" style="color:blue;text-decoration:underline;cursor:pointer">sbin/setkey/test-pfkey.c</a></td><td style="font-size:1em;margin:0px;text-align:right;padding:0.2em 0.2em 0.1em 0.1em;border:none">32</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;width:500px;vertical-align:middle"><table width="79%" style="margin-bottom:0px;table-layout:auto;border-collapse:collapse;border:none"><tbody><tr><td style="margin:0px;height:7pt;background-color:rgb(85, 204, 85);width:80.1719px"></td><td style="margin:0px;height:7pt;background-color:rgb(204, 85, 85);width:80.1719px"></td><td style="margin:0px;height:7pt;width:234.656px"></td></tr></tbody></table></td></tr><tr><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;white-space:nowrap">-rw-r--r--</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none"><a href="https://cgit.freebsd.org/src/diff/sbin/setkey/token.l?id=16aabb761c0a" rel="noreferrer nofollow noopener" target="_blank" style="color:blue;text-decoration:underline;cursor:pointer">sbin/setkey/token.l</a></td><td style="font-size:1em;margin:0px;text-align:right;padding:0.2em 0.2em 0.1em 0.1em;border:none">11</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;width:500px;vertical-align:middle"><table width="79%" style="margin-bottom:0px;table-layout:auto;border-collapse:collapse;border:none"><tbody><tr><td style="margin:0px;height:7pt;background-color:rgb(85, 204, 85);width:0px"></td><td style="margin:0px;height:7pt;background-color:rgb(204, 85, 85);width:54.8906px"></td><td style="margin:0px;height:7pt;width:340.109px"></td></tr></tbody></table></td></tr><tr><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;white-space:nowrap">-rw-r--r--</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none"><a href="https://cgit.freebsd.org/src/diff/sys/netipsec/ipsec.c?id=16aabb761c0a" rel="noreferrer nofollow noopener" target="_blank" style="color:blue;text-decoration:underline;cursor:pointer">sys/netipsec/ipsec.c</a></td><td style="font-size:1em;margin:0px;text-align:right;padding:0.2em 0.2em 0.1em 0.1em;border:none">5</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;width:500px;vertical-align:middle"><table width="79%" style="margin-bottom:0px;table-layout:auto;border-collapse:collapse;border:none"><tbody><tr><td style="margin:0px;height:7pt;background-color:rgb(85, 204, 85);width:0px"></td><td style="margin:0px;height:7pt;background-color:rgb(204, 85, 85);width:24.875px"></td><td style="margin:0px;height:7pt;width:370.125px"></td></tr></tbody></table></td></tr><tr><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;white-space:nowrap">-rw-r--r--</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none"><a href="https://cgit.freebsd.org/src/diff/sys/netipsec/ipsec.h?id=16aabb761c0a" rel="noreferrer nofollow noopener" target="_blank" style="color:blue;text-decoration:underline;cursor:pointer">sys/netipsec/ipsec.h</a></td><td style="font-size:1em;margin:0px;text-align:right;padding:0.2em 0.2em 0.1em 0.1em;border:none">2</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;width:500px;vertical-align:middle"><table width="79%" style="margin-bottom:0px;table-layout:auto;border-collapse:collapse;border:none"><tbody><tr><td style="margin:0px;height:7pt;background-color:rgb(85, 204, 85);width:0px"></td><td style="margin:0px;height:7pt;background-color:rgb(204, 85, 85);width:9.875px"></td><td style="margin:0px;height:7pt;width:385.125px"></td></tr></tbody></table></td></tr><tr><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;white-space:nowrap">-rw-r--r--</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none"><a href="https://cgit.freebsd.org/src/diff/sys/netipsec/key.c?id=16aabb761c0a" rel="noreferrer nofollow noopener" target="_blank" style="color:blue;text-decoration:underline;cursor:pointer">sys/netipsec/key.c</a></td><td style="font-size:1em;margin:0px;text-align:right;padding:0.2em 0.2em 0.1em 0.1em;border:none">12</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;width:500px;vertical-align:middle"><table width="79%" style="margin-bottom:0px;table-layout:auto;border-collapse:collapse;border:none"><tbody><tr><td style="margin:0px;height:7pt;background-color:rgb(85, 204, 85);width:0px"></td><td style="margin:0px;height:7pt;background-color:rgb(204, 85, 85);width:60.0312px"></td><td style="margin:0px;height:7pt;width:334.969px"></td></tr></tbody></table></td></tr><tr><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;white-space:nowrap">-rw-r--r--</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none"><a href="https://cgit.freebsd.org/src/diff/sys/netipsec/xform_ah.c?id=16aabb761c0a" rel="noreferrer nofollow noopener" target="_blank" style="color:blue;text-decoration:underline;cursor:pointer">sys/netipsec/xform_ah.c</a></td><td style="font-size:1em;margin:0px;text-align:right;padding:0.2em 0.2em 0.1em 0.1em;border:none">26</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;width:500px;vertical-align:middle"><table width="79%" style="margin-bottom:0px;table-layout:auto;border-collapse:collapse;border:none"><tbody><tr><td style="margin:0px;height:7pt;background-color:rgb(85, 204, 85);width:5.125px"></td><td style="margin:0px;height:7pt;background-color:rgb(204, 85, 85);width:124.812px"></td><td style="margin:0px;height:7pt;width:265.062px"></td></tr></tbody></table></td></tr><tr><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;white-space:nowrap">-rw-r--r--</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none"><a href="https://cgit.freebsd.org/src/diff/sys/netipsec/xform_esp.c?id=16aabb761c0a" rel="noreferrer nofollow noopener" target="_blank" style="color:blue;text-decoration:underline;cursor:pointer">sys/netipsec/xform_esp.c</a></td><td style="font-size:1em;margin:0px;text-align:right;padding:0.2em 0.2em 0.1em 0.1em;border:none">25</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;width:500px;vertical-align:middle"><table width="79%" style="margin-bottom:0px;table-layout:auto;border-collapse:collapse;border:none"><tbody><tr><td style="margin:0px;height:7pt;background-color:rgb(85, 204, 85);width:0px"></td><td style="margin:0px;height:7pt;background-color:rgb(204, 85, 85);width:124.812px"></td><td style="margin:0px;height:7pt;width:270.188px"></td></tr></tbody></table></td></tr><tr><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;white-space:nowrap">-rw-r--r--</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none"><a href="https://cgit.freebsd.org/src/diff/usr.bin/netstat/ipsec.c?id=16aabb761c0a" rel="noreferrer nofollow noopener" target="_blank" style="color:blue;text-decoration:underline;cursor:pointer">usr.bin/netstat/ipsec.c</a></td></tr></tbody></table><br></span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre"><span><a href="https://cgit.freebsd.org/src/commit/?id=6c80c319ef88" rel="noreferrer nofollow noopener" target="_blank" style="color:var(--interaction-norm);text-decoration:underline;cursor:pointer">https://cgit.freebsd.org/src/commit/?id=6c80c319ef88</a></span></span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre"><table style="margin-bottom:0px;table-layout:auto;border-collapse:collapse;border:1px solid rgb(170, 170, 170);background-color:rgb(238, 238, 238);font-family:sans-serif;white-space:normal"><tbody><tr><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;white-space:nowrap">-rw-r--r--</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none"><a href="https://cgit.freebsd.org/src/diff/sys/opencrypto/cryptodev.c?id=6c80c319ef88" rel="noreferrer nofollow noopener" target="_blank" style="color:blue;text-decoration:underline;cursor:pointer">sys/opencrypto/cryptodev.c</a></td></tr></tbody></table><table style="margin-bottom:0px;table-layout:auto;border-collapse:collapse;border:1px solid rgb(170, 170, 170);background-color:rgb(238, 238, 238);font-family:sans-serif;white-space:normal"><tbody><tr><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none;white-space:nowrap">-rw-r--r--</td><td style="font-size:1em;margin:0px;padding:0.2em 0.2em 0.1em 0.1em;border:none"><a href="https://cgit.freebsd.org/src/diff/sys/opencrypto/cryptodev.c?id=6c80c319ef88" rel="noreferrer nofollow noopener" target="_blank" style="color:blue;text-decoration:underline;cursor:pointer">sys/opencrypto/cryptodev.</a>h</td></tr></tbody></table>
<br></span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre">Compiled New Kernel with this extra options:</span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre"><br></span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre"><span># OWNKERNv1</span><div><span>include GENERIC</span></div><span>ident OWNKERNv1</span><br></span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre"><span><br></span></span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre"><span>options &nbsp; &nbsp; &nbsp; &nbsp; IPFIREWALL</span><div><span>options &nbsp; &nbsp; &nbsp; &nbsp; DUMMYNET</span></div><div><span>options &nbsp; &nbsp; &nbsp; &nbsp; IPFIREWALL_DEFAULT_TO_ACCEPT</span></div><div><span>options &nbsp; &nbsp; &nbsp; &nbsp; IPDIVERT</span></div><div><span>options &nbsp; &nbsp; &nbsp; &nbsp; IPSEC</span></div><div><span>options &nbsp; &nbsp; &nbsp; &nbsp; IPSEC_SUPPORT</span></div><div><span>device &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;crypto</span></div><div><span><br></span></div><span></span></span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre"><span style="font-size:14px;white-space:normal;background-color:rgb(255, 255, 255)">cd /usr/src</span><br style="font-size:14px;white-space:normal;background-color:rgb(255, 255, 255)"><span style="font-size:14px;white-space:normal;background-color:rgb(255, 255, 255)">make -j$(sysctl -n hw.ncpu) buildkernel KERNCONF=OWNKERNv1</span><br></span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><font face="monospace" color="#333333"><span style="font-size:13.3333px;white-space:pre"><span style="font-size:14px;white-space:normal;background-color:rgb(255, 255, 255)"><br></span></span></font></div><div style="line-height:1.5;font-family:system-ui, sans-serif">But When i&nbsp; try to compile new kernel&nbsp; it gets too many errors.</div><div style="line-height:1.5;font-family:system-ui, sans-serif">any help will be appreciated at this point..</div><div style="line-height:1.5;font-family:system-ui, sans-serif"><br></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><b>Part of Error Logs:</b></div><div style="line-height:1.5;font-family:system-ui, sans-serif"><span>-- all_subdir_cryptodev ---</span><div><span>/usr/src/sys/opencrypto/cryptodev.c:314:16: error: incompatible function pointer types initializing 'fo_stat_t *' (aka 'int (*)(struct file *, struct stat *, struct ucred *)') with an expression of type 'int (struct file *, struct stat *, struct ucred *, struct thread *)' [-Werror,-Wincompatible-function-pointer-types]</span></div><div><span>&nbsp; &nbsp; .fo_stat = cryptof_stat,</span></div><div><span>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;^~~~~~~~~~~~</span></div><div><span>/usr/src/sys/opencrypto/cryptodev.c:412:14: error: use of undeclared identifier 'enc_xform_des'; did you mean 'enc_xform_ccm'?</span></div><div><span>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; txform = &amp;enc_xform_des;</span></div><div><span>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ^~~~~~~~~~~~~</span></div><div><span>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; enc_xform_ccm</span></div><div><span>/usr/src/sys/opencrypto/xform_enc.h:105:31: note: 'enc_xform_ccm' declared here</span></div><div><span>extern const struct enc_xform enc_xform_ccm;</span></div><div><span>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ^</span></div><div><span>/usr/src/sys/opencrypto/cryptodev.c:415:14: error: use of undeclared identifier 'enc_xform_3des'</span></div><div><span>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; txform = &amp;enc_xform_3des;</span></div><div><span>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ^</span></div><span>...</span></div></div><div class="protonmail_signature_block" style="font-family: Arial; font-size: 14px;"><br>
</div>
help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?FrYE0Wy9SlEb4a6GfDGsEjms1MiVhEhVcWwdvc0SvLck_mxAfGwY4DwXYdzZajZrMxuqkho6pRa5rbwXDJUA39ZlYwJuGuHX4YmXOT-Medw=>