From owner-freebsd-current@FreeBSD.ORG Wed Feb 20 15:34:21 2008 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DC96016A404; Wed, 20 Feb 2008 15:34:21 +0000 (UTC) (envelope-from mike@sentex.net) Received: from smarthost2.sentex.ca (smarthost2.sentex.ca [205.211.164.50]) by mx1.freebsd.org (Postfix) with ESMTP id 999FF13C455; Wed, 20 Feb 2008 15:34:21 +0000 (UTC) (envelope-from mike@sentex.net) Received: from lava.sentex.ca (pyroxene.sentex.ca [199.212.134.18]) by smarthost2.sentex.ca (8.14.2/8.14.2) with ESMTP id m1KFYJXY033296; Wed, 20 Feb 2008 10:34:20 -0500 (EST) (envelope-from mike@sentex.net) Received: from mdt-xp.sentex.net (simeon.sentex.ca [192.168.43.27]) by lava.sentex.ca (8.13.8/8.13.3) with ESMTP id m1KFYJfx016149 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 20 Feb 2008 10:34:19 -0500 (EST) (envelope-from mike@sentex.net) Message-Id: <200802201534.m1KFYJfx016149@lava.sentex.ca> X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Wed, 20 Feb 2008 10:34:19 -0500 To: "Hansa" , , From: Mike Tancsa In-Reply-To: References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Cc: Subject: Re: Upgrading from FreeBSD 6.2 to FreeBSD 7.0 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Feb 2008 15:34:22 -0000 At 10:10 AM 2/20/2008, Hansa wrote: >/usr/src/sys/i386/conf/TESTRABIT: unknown option "IPSEC_ESP" >*** Error code 1 > >Stop in /usr/src. >*** Error code 1 > >Stop in /usr/src. >kernel build duration: 00:00:00 >==== STUCK ==== > >My guess is that the ipsec (crypto?) source code is missing? Is this >correct? If so, where can I find it and where should I put it? Hi, The options for IPSEC are different in RELENG_7. The KAME implementation is no longer there as its just FAST_IPSEC. So get rid of IPSEC_ESP and just have options IPSEC device crypto in your kernel. ---Mike